Vulnerability Management
Fortinet FortiOS CVE-2024-21762: Exploitation Patterns
CVE-2024-21762 gave attackers pre-auth RCE on FortiGate SSL VPN. We trace the exploitation patterns, scanner behavior, and who got hit first.
Feb 14, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedVulnerability Management
Vulnerability SLA Compliance Tracking That Actually Works
Most organizations define vulnerability SLAs and then fail to meet them. The problem is not motivation. It is measurement and process.
Feb 11, 20265 min read
Vulnerability Management
How to set up a vulnerability management program
A step-by-step guide to setting up a vulnerability management program: scanning schedules, risk-based triage, patch management, and metrics that hold up in an audit.
Feb 11, 20268 min read
Vulnerability Management
How to configure Nessus for vulnerability scanning
A step-by-step guide to installing Nessus, building scan policies, defining safe targets, and validating results — plus where supply chain risk starts beyond the network scan.
Feb 11, 20267 min read
Vulnerability Management
Firmware Analysis and Reverse Engineering for Security Teams
Firmware is the forgotten attack surface. Here are the techniques security teams use to uncover hidden vulnerabilities in embedded software.
Feb 9, 20265 min read
Vulnerability Management
govulncheck in Production Integration
govulncheck is the best vulnerability scanner the Go ecosystem has ever had, but turning it from a demo into a production gate takes more than adding a CI step.
Feb 7, 20267 min read
Vulnerability Management
How to scope a penetration test and define rules of engag...
A practical guide to scoping a pentest and writing penetration testing rules of engagement, covering targets, timing, methodology, and legal sign-off.
Feb 6, 20268 min read
Vulnerability Management
A History of Browser Sandbox Escapes and What They Teach Us
Browser sandboxes are the last line of defense against web-based attacks. When they fail, everything is exposed. Here is what the major escapes reveal.
Feb 6, 20265 min read
Vulnerability Management
Vulnerability Management Automation in 2026: Beyond Scanning
Modern vulnerability management is shifting from periodic scanning to continuous, automated triage and remediation. Here's what that looks like in practice.
Feb 5, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.