Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
No one can name the date a quantum computer breaks RSA. NIST has set standards and a 2035 target. A calm checklist to inventory and plan your move now.
Two package takeovers, two ecosystems: ctx on PyPI in 2022 and ua-parser-js on npm in 2021. A sourced timeline and what defenders should change.
Test five controls against ProxyShell: inventory, exposure, patch speed, detection and containment on your Exchange servers, and fix the gaps found.
ProxyLogon was a chain of Microsoft Exchange flaws patched on 2 March 2021 and exploited at scale. A sourced timeline and what defenders can take from it.
In 2024 a CDN script used by over 100,000 sites served malicious code after an ownership change. Use this checklist to test whether you would notice.
A change of owner turned polyfill.io into a malware path on over 100,000 sites. See the timeline and the steps that stop third-party script risk.
In February 2021 someone raised lye settings at Oldsmar, Florida by remote access. An operator reversed it. Sourced timeline and what to check on yours.
In February 2021 someone raised lye dosing at a water plant and an operator caught it. A checklist of CISA's recommended controls for any plant or OT team.
In 2023 an attacker used a stolen service account to read Okta support files, including HAR files with session tokens. See the timeline and what to change.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
