Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (521)AI Security (779)Vulnerability Analysis (568)Security (521)DevSecOps (494)Application Security (480)Open Source Security (406)AppSec (306)Compliance (301)Industry Analysis (294)Container Security (284)Best Practices (252)Open Source (252)Cloud Security (239)Buyer's Guides (216)Software Supply Chain Security (175)Regulatory Compliance (138)Incident Analysis (137)Vulnerability Management (133)Security Guides (124)Concepts (116)Containers (100)Supply Chain Attacks (92)SBOM (76)Vulnerabilities (71)Product (69)Threat Intelligence (64)Supply Chain Security (55)Supply Chain (55)Infrastructure Security (52)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Licensing (26)Tutorials (24)Engineering (24)Ransomware (24)Kubernetes Security (22)Guides (22)SecOps (21)Vulnerability Guides (20)Regulation (20)Industry Guides (19)Case Studies (18)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Threat Research (16)Agent Security (16)Vulnerability Response (16)Risk Management (16)Tool Reviews (16)Compliance & Frameworks (15)Identity Security (15)Cryptography (15)Security Concepts (15)Incident Response (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Career (10)Enterprise (9)Culture (9)Strategy (8)Company (8)Standards (8)Architecture (8)Industry Insights (7)Industry Trends (7)Secure Development (7)How-To Guide (7)Zero-Day Exploits (7)Network Security (7)Dependency Management (7)Industry (6)Vendor Comparison (6)Research (6)Dev Practices (6)Security Operations (6)Organizational Security (6)Developer Security (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Tool Comparison (4)Mobile Security (4)Product Launch (4)Policy (4)Offensive Security (4)Tool Comparisons (4)Healthcare Security (3)Social Engineering (3)Build Security (3)Governance (3)Vulnerability Research (3)Regional Security (3)Policy & Compliance (3)SBOM Standards (3)Software Supply Chain (3)Analysis (3)Startup Security (3)Hardware Security (3)Zero-Day Analysis (2)Industry News (2)Release (2)SBOM and Compliance (2)Security Management (2)Threat Actors (2)API Security (2)Security Architecture (2)Security Culture (2)DeFi Security (2)Incident Postmortem (1)Technical (1)Healthcare (1)Events (1)Product Update (1)Language Security (1)Emerging Threats (1)Privacy (1)Lifecycle Management (1)Career Development (1)Tools & Platforms (1)Threat Modeling (1)Browser Security (1)Threat Analysis (1)Business Continuity (1)Runtime Security (1)Credential Attacks (1)PKI Security (1)Architecture Security (1)Nation-State Threats (1)Tools & Techniques (1)Privacy & Security (1)

Articles

RSS feed
Security

What Is a DTO (Data Transfer Object)? Security Notes for Java and Beyond

A DTO is a plain object that carries data across a boundary. Used well it is also one of your best defenses against mass assignment and data over-exposure.

Apr 9, 20255 min read
Security

The Snyk Logo: The Story Behind Patch the Guard Dog

The Snyk logo is a friendly Doberman named Patch, and the choice of a guard dog says more about the company's positioning than a wordmark ever could.

Apr 9, 20255 min read
Security

Vulnerability Meaning in Telugu: The Term Explained for Security Teams

The vulnerability meaning in Telugu is durbalatvam, a weakness that can be exploited. Here is the translation plus what the word actually signifies in software security.

Apr 9, 20256 min read
Security

@testing-library/jest-dom: What It Does and How to Keep It Secure

@testing-library/jest-dom is a dev-only matcher library that is low risk to your production security, provided you keep it out of your runtime bundle and patched.

Apr 9, 20255 min read
Security

CVE-2023-22081: The Oracle Java JSSE Denial-of-Service Flaw

CVE-2023-22081 is a Java SE and GraalVM vulnerability in the JSSE component that can cause a partial denial of service over HTTPS. Here is what to patch.

Apr 9, 20255 min read
Security

CVE-2022-40152: Woodstox XML Parsing Denial of Service

CVE-2022-40152 lets malicious XML with deeply nested DTD content crash Woodstox-based parsers via stack overflow. Here is the root cause, affected versions, and how to remediate it.

Apr 9, 20255 min read
Security

What Is Snyk Code? A Guide to the SAST Often Misspelled "Synk Code"

"Synk Code" is a common misspelling of Snyk Code, Snyk's developer-first SAST engine. Here is what it scans, how DeepCode AI works, and where it fits.

Apr 9, 20256 min read
Security

Secure Session Management: A Practical Guide for Web Apps

Secure session management comes down to a handful of decisions about cookies, storage, expiry, and rotation. Get those right and you close off most session-based attacks.

Apr 9, 20255 min read
Security

How to Choose an Enterprise Vulnerability Management Tool

What an enterprise vulnerability management tool actually needs to do, how it differs from a scanner, and the evaluation criteria that separate a program that scales from one that drowns in noise.

Apr 9, 20256 min read
Page 41 of 58

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

Blog — security (Page 41) | Safeguard — Software Supply Chain Security Insights