Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2026-102255 is a CVSS 10.0 pre-auth SSRF in SonicWall SMA1000 WorkPlace. Honeypots saw attempts from 8 Oct. Fixed builds, hunting steps, KEV status.
Hijacked Tor exits sent SSH logins to 12 interceptors from 2 to 5 Oct 2026. Check known_hosts for the fake key, rotate passwords and hunt for Ebury.
APT28 hit a NATO naval shipbuilder with HOOKEDGE, a stolen SSH key, an NTLM trick and a new loader. The timeline, IOCs and how to hunt for each step.
Yamato (about 5.31M records), Nikkei (1.83M) and FANCL/Attenir (834,947) disclosed breaches on 16 Oct 2026. What leaked, what is unknown, what to check.
A security incident at contractor BAE Systems halted the US federal Bankruptcy Noticing Center. What is down, what courts ordered, and the vendor risk lesson.
An abandoned Popcorn Time fork left millions of PCs one domain away from takeover. Find Updater.exe and PT.updd, block 20 domains, then uninstall it.
OVHcloud CLI v0.11.0 to v0.15.0 binaries were swapped for a stealer on 19 Oct 2026. Check hashes and envchecker folders, rotate secrets, use v0.16.0.
OpenCode Console provider keys may have leaked, and a silent fix closed a Windows MCP sign in RCE. Rotate stored keys and upgrade OpenCode to 1.18.33.
Lazarus Operation FlashHole wraps payloads for South Korean firms in ML-KEM-1024. How the chain works, the published IOCs, and how to hunt for it.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
