Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (12009)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1718)Supply Chain (1423)Supply Chain Security (1021)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Product (504)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Vulnerability Analysis

CVE-2024-5921: High Certificate Validation Flaw in GlobalProtect

CVE-2024-5921 lets GlobalProtect connect to arbitrary servers and trust bad root certificates. NVD says 8.8, the vendor 5.6. Patch and set strict checks.

Oct 18, 20264 min read
Vulnerability Analysis

CVE-2024-5915: High Local Privilege Escalation in GlobalProtect

CVE-2024-5915 lets a local user gain elevated rights via the GlobalProtect app on Windows. NVD says 7.8 High, the vendor 5.2. Upgrade and lock the folder.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2024-5914: Critical Command Injection in Cortex XSOAR Scripts

CVE-2024-5914 is an unauthenticated command injection in the Cortex XSOAR CommonScripts pack. NVD says 9.8, the vendor 7.0. Update to 1.12.33 or later.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2024-5908: High Credential Exposure in GlobalProtect Logs

CVE-2024-5908 leaks encrypted GlobalProtect credentials into app logs. NVD says 7.5 High, the vendor says 5.5. Upgrade the app and rotate passwords.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2024-5907: High Privilege Escalation in Cortex XDR Agent

CVE-2024-5907 is a race condition privilege escalation in the Cortex XDR agent on Windows. NVD says 7.0 High, Palo Alto says 5.2. Upgrade to a fixed build.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2024-5847: High Second Use After Free in Chrome PDFium

CVE-2024-5847 is a second PDFium use after free fixed in Chrome 126, triggered by a crafted PDF. NVD says High, Chromium says Medium. Update and relaunch.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2024-5846: High Use After Free in Chrome PDFium

CVE-2024-5846 is a use after free in PDFium, the PDF engine in Chrome, triggered by a crafted PDF. NVD says High. Update to Chrome 126 or later and relaunch.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2024-5845: High Use After Free in Chrome Audio

CVE-2024-5845 is a use after free in the Chrome Audio component, triggered by a crafted PDF file per the record. Update to Chrome 126 or later and relaunch.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2024-5844: High Heap Overflow in Chrome Tab Strip

CVE-2024-5844 is a heap buffer overflow in the Chrome Tab Strip allowing an out of bounds read. NVD says High, Chromium says Medium. Update to Chrome 126.

Oct 18, 20263 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.