Security
CVE-2021-43527: The NSS Heap Overflow Explained
CVE-2021-43527 is a critical heap buffer overflow in Mozilla NSS that can lead to remote code execution when verifying certain digital signatures.
Aug 14, 20255 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Code Guide Buzzardcoding: How to Read and Review Code for Security
A good code guide teaches you to read code, not just write it. This walkthrough covers how to review code for the security flaws that automated tools and casual readers miss.
Aug 7, 20256 min read
Security
AWS Breach: How They Actually Happen and How to Prevent One
Most AWS breaches are not AWS failing — they are misconfiguration, leaked keys, and over-privileged roles. Here is how the real ones unfolded and how to stop yours.
Aug 7, 20256 min read
Security
Choosing a Code Analysis Tool: A Practical Security Guide
What a code analysis tool actually does, how static source code analysis differs from dependency scanning, and how to pick one that finds real bugs instead of noise.
Aug 5, 20256 min read
Security
What Is Checkmarx Used For? A Practical Overview
Checkmarx is used mainly for static application security testing (SAST): scanning source code for vulnerabilities early in development. Here is what it does and how teams actually use it.
Aug 5, 20255 min read
Security
How to Check Code for Security Bugs Before You Ship
Learning to check code for security issues means layering the right tools in the right order. Here is a practical workflow that catches real bugs without drowning you in noise.
Aug 5, 20256 min read
Security
CVE-2022-31160: Understanding the jQuery UI Checkboxradio XSS
CVE-2022-31160 is a cross-site scripting flaw in jQuery UI's checkboxradio widget, fixed in 1.13.2. Here is how it works and how to remediate it.
Aug 4, 20256 min read
Security
Adversarial Images: How They Fool ML Models
What adversarial images are, why a few invisible pixels can flip a model's prediction, and the defenses that reduce the risk in production.
Aug 4, 20256 min read
Security
Checkmarx Tutorial: A Practical Guide to Getting Started
A hands-on Checkmarx tutorial covering what the platform scans, how to run your first SAST scan, triaging results, and wiring the CLI into CI.
Jul 30, 20256 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.