Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A 17 Oct intrusion at Furusato Choice exposed 4,454,097 donor records, hashed passwords and tax estimates included. What happened and what to check now.
From 26 Oct 2026 curl handles LOW and MEDIUM vulnerability reports in public GitHub issues. What changes for teams that ship libcurl, and how to track it.
Hollys says intruders mining crypto in its cloud reached a 2020 migration file holding about 2.76M member records. What leaked, the dates, what to do.
The ICO reprimanded Data Cymru and Ogi Networks after a 2012 test account using Password1 let ransomware in. What happened and the fixes to run now.
An exposed admin function at contractor Trade Works let an attacker view 4,975 Iwai Cosmo customers' data and place orders in 7 accounts. What to check.
eMudhra revoked 9,356 RSA certificates on 19 Oct. Days later 156 Indian government sites still served them. Firefox blocks them; Chrome does not.
BlackX beat Secure Boot on fully patched Windows PCs because the PCA 2011 revocation in KB5025885 is manual. What it does and how to check your fleet.
GoDaddy revoked 403,643 TLS certificates after its CP/CPS policy text did not match what it issued. Not a key compromise. How to check and what to fix.
n0n listed 38 maritime firms in 18 countries. Researchers assess one software vendor's archive as the likely source. No victim has confirmed a breach.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
