Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Google's threat intelligence team describes how a suspected PRC-nexus actor used a zero-day in remote support appliances to dump secrets and grant itself admin roles. Hunting steps from the report.
An 8-K said non-sensitive data fed about 13 million dollars of fraudulent leases. In September, notice letters and lawsuits described the data differently. The gap is still unresolved.
Cisco Talos describes a Rust backdoor that takes commands from an Outlook mailbox and moves files through OneDrive. What Talos confirms, how sure it is, and how to hunt for it.
A Portuguese telecom operator confirmed a targeted denial of service attack on its international network. The times, what MEO says it did not lose, and what nobody has said.
A Bavarian municipal utility said attackers encrypted central IT on 1 Sep 2026 while electricity and water supply stayed up. What the utility confirmed, and what is still open.
A medical device maker told the SEC that unauthorized activity caused a network outage and disrupted manufacturing and shipping. What the filing states and what it leaves unknown.
ChatGPT, Claude and Grok failed within hours of each other. Each company gave a different explanation, and no common cause has been confirmed. A look at what is established.
Seven CSB final reports were released between September 2025 and September 2026. A recurring theme is relying on procedures where engineered controls were available.
The CSB's 10 August 2026 report on the Clairton explosion blames an informal procedure and poor siting. Automation only helps if software encodes the real procedure.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
