Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A checklist from the December 2023 Ledger connect-kit incident: publisher access, version pinning, runtime loading and fast response. Score your own org.
In December 2023 a phished npm account led to malicious Ledger Connect Kit versions. A sourced timeline, where reports differ and what defenders can learn.
The 2021 Kaseya VSA attack reached customers through a provider's tool. Check MFA, RMM exposure, offline backups and least privilege with this list.
A dated timeline of the July 2021 Kaseya VSA ransomware attack, where sources disagree, and five lessons for teams that run remote management tools.
A dated timeline of the July 2021 Kaseya VSA ransomware attack by REvil, with the CISA and FBI guidance and five lessons for remote management tools.
The Jenkins script console is effectively full admin. Test access, controller isolation, credentials, logging and updates to see what you would catch.
What Jenkins documents about its script console, plus three dated advisories from 2017, 2019 and 2024, and what defenders should take from them.
A ten-question checklist built from CISA's Ivanti Connect Secure advisory. Test your edge device inventory, logging, egress limits and credential response.
Attackers chained Ivanti Connect Secure flaws before patches existed in early 2024. Read the sourced timeline and six controls that shorten your exposure.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
