Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (10393)Vulnerability Analysis (2437)AI Security (787)Security (523)DevSecOps (503)Application Security (499)Tool Comparison (454)Open Source Security (413)Industry Analysis (310)AppSec (309)Compliance (308)Container Security (285)Best Practices (256)Open Source (252)Cloud Security (239)Buyer's Guides (217)Software Supply Chain Security (180)Incident Analysis (140)Regulatory Compliance (140)Vulnerability Management (140)Security Guides (124)Ranking (116)Concepts (116)Product (101)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (72)Threat Intelligence (66)Infrastructure Security (56)Supply Chain (55)Supply Chain Security (55)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (28)Licensing (26)Tutorials (24)Ransomware (24)Kubernetes Security (22)Guides (22)SecOps (21)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Case Studies (18)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Agent Security (16)Vulnerability Response (16)Tool Reviews (16)Risk Management (16)Threat Research (16)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Incident Response (15)Cryptography (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Career (10)Security News (10)Culture (9)Enterprise (9)Company (9)Architecture (8)Strategy (8)Standards (8)Industry Insights (7)Network Security (7)Industry Trends (7)How-To Guide (7)Dependency Management (7)Secure Development (7)Zero-Day Exploits (7)Industry (6)Security Operations (6)Vendor Comparison (6)Organizational Security (6)Dev Practices (6)Research (6)Developer Security (6)Breach Analysis (5)Code Security (5)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Cryptocurrency Security (4)Startup Security (3)Healthcare Security (3)Governance (3)Software Supply Chain (3)Analysis (3)Vulnerability Research (3)Hardware Security (3)Regional Security (3)Build Security (3)Policy & Compliance (3)Social Engineering (3)Industry News (2)Security Culture (2)Zero-Day Analysis (2)SBOM Standards (2)Security Architecture (2)DeFi Security (2)SBOM and Compliance (2)API Security (2)Security Management (2)Threat Actors (2)Release (2)Incident Postmortem (1)Architecture Security (1)Career Development (1)Privacy & Security (1)Emerging Threats (1)Threat Modeling (1)Business Continuity (1)Nation-State Threats (1)Runtime Security (1)Tools & Platforms (1)Product Update (1)Language Security (1)Privacy (1)PKI Security (1)Healthcare (1)Technical (1)Threat Analysis (1)SBOM & Standards (1)Tools & Techniques (1)Lifecycle Management (1)Browser Security (1)Credential Attacks (1)Events (1)

Articles

RSS feed
SBOM

Medical device firmware SBOM and coordinated vulnerabilit...

How medical device firmware SBOMs, FDA Section 524B, ISO 81001-5-1, and coordinated vulnerability disclosure work together to secure connected IoMT devices.

Jan 1, 20267 min read
Incident Analysis

WannaCry's Supply Chain Dimensions

WannaCry was not a supply chain attack in the usual sense. Its real supply chain story is EternalBlue, NSA leaks, and the patch cycle.

Jan 1, 20267 min read
Vulnerability Analysis

cross-spawn ReDoS vulnerability (CVE-2024-21538)

CVE-2024-21538 is a ReDoS flaw in the widely-used cross-spawn npm package. Learn the impact, CVSS/EPSS context, and how to remediate it.

Jan 1, 20267 min read
Vulnerability Analysis

Express.js open redirect vulnerability (CVE-2024-29041)

CVE-2024-29041 lets attackers weaponize Express.js redirects for phishing. See affected versions, CVSS/EPSS data, and how to remediate fast.

Jan 1, 20267 min read
Industry Analysis

Third-party risk management for telehealth platforms

A six-step playbook for telehealth vendor risk management: inventory PHI flows, tier HIPAA business associate risk, run SCA on vendor SDKs, and monitor continuously.

Jan 1, 20268 min read
Vulnerability Analysis

http-cache-semantics ReDoS vulnerability (CVE-2022-25881)

CVE-2022-25881 lets attacker-influenced HTTP responses trigger catastrophic regex backtracking in http-cache-semantics, hanging Node.js services. Here's how to detect and fix it.

Jan 1, 20267 min read
Buyer's Guides

Buyer's guide: selecting an SBOM tool for medical device ...

A buyer's guide comparing SBOM and SCA tools for medical device makers navigating FDA cybersecurity requirements, with honest vendor strengths and limitations.

Jan 1, 20268 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.

Blog (Page 1155) | Safeguard — Software Supply Chain Security Insights