Security
How to Build Security Into Every SDLC Phase
Bolting a scan onto release week is not security in the SDLC. Here is what a security control looks like in each phase, and what it costs to skip them.
Jan 28, 20255 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
CVE-2024-0333: The Chrome Extensions Data Validation Flaw Explained
CVE-2024-0333 is an insufficient data validation bug in Chrome's Extensions component that let a network attacker push a malicious extension. Here is what it is and how to stay patched.
Jan 25, 20255 min read
Security
Which of the Following Is an Example of Malicious Code?
Viruses, worms, trojans, ransomware, spyware, and logic bombs are all examples of malicious code. Here is how to tell them apart and defend against each.
Jan 22, 20256 min read
Security
Hacking Skills: What Ethical Hackers Actually Need to Learn
The hacking skills that matter for a security career are less about flashy exploits and more about networking, systems, code, and disciplined methodology. Here is the real list.
Jan 22, 20257 min read
Security
Nginx and CVE-2023-44487: How to Fix HTTP/2 Rapid Reset
CVE-2023-44487, the HTTP/2 Rapid Reset attack, is a protocol-level DoS. Nginx resists it with default settings, but a loose keepalive config can still be abused. Here's the fix.
Jan 22, 20256 min read
Security
How Does Malicious Code Spread? A Practical Security Guide
Malicious code spreads through the channels people already trust: email attachments, infected downloads, removable media, compromised websites, and increasingly the software supply chain itself.
Jan 20, 20256 min read
Security
What Is a Security Vulnerability? A Clear Definition
A security vulnerability is a weakness that an attacker can exploit to compromise a system. Here is a precise definition and how it differs from a threat or risk.
Jan 20, 20256 min read
Security
Package Lock Files and Their Security Implications
Lock files are your first line of defense against dependency drift. This guide explains how package-lock.json, yarn.lock, and similar files protect your builds from supply chain manipulation.
Oct 18, 20228 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.