Incident Analysis
Would your org have caught the Equifax breach? A control checklist
The 2017 Equifax breach turned on a missed patch, a failed scan, an expired certificate and flat access. Test your own controls against each.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedIncident Analysis
Would you have caught the ctx and ua-parser-js package hijacks?
Two maintainer account takeovers pushed malicious releases of trusted packages. Check lockfiles, release cooldowns, install scripts and secret exposure.
Oct 18, 20264 min read
Incident Analysis
What happened in the CrowdStrike outage and what should defenders learn?
A faulty content update crashed Windows hosts on 19 July 2024. Read the sourced timeline and the lessons on staged rollouts, recovery and vendor updates.
Oct 18, 20264 min read
Incident Analysis
Would your org have caught a CrowdStrike style bad update?
A checklist of controls that limit a faulty vendor content update: staged rollout, recovery access, a current inventory and a tested restore path.
Oct 18, 20264 min read
Incident Analysis
Confluence CVE-2022-26134: what happened and what to learn
CVE-2022-26134 was an unauthenticated remote code execution flaw in Confluence Server and Data Center, disclosed 2 June 2022. Timeline and lessons.
Oct 18, 20264 min read
Incident Analysis
Would your org have caught the Confluence CVE-2022-26134 attack?
A 10-point readiness checklist from the CVE-2022-26134 advisory to test whether your team could spot and fix a similar exploited flaw within a day.
Oct 18, 20264 min read
Incident Analysis
Would your team catch a Colonial Pipeline style attack? A checklist
A practical checklist built from the CISA and FBI DarkSide advisory and the public record: remote access, IT and OT separation, backups, decisions.
Oct 18, 20264 min read
Incident Analysis
Colonial Pipeline attack: timeline and lessons for defenders
The May 2021 Colonial Pipeline ransomware attack hit IT systems and led to a precautionary OT shutdown. A sourced timeline and the controls CISA advises.
Oct 18, 20265 min read
Incident Analysis
Codecov bash uploader: would your org have caught it?
A CI script was altered for two months and found by a checksum mismatch. Six controls that would catch or limit that kind of tampering in your pipeline.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.