Compliance
ITAR and EAR Export Controls: What Software Teams Need to Know
Export control regulations affect software development more than most teams realize. Here's how ITAR and EAR intersect with software supply chains.
Jan 31, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCloud Security
What is Posture Management
Security posture management explained: what it covers, how it differs from vulnerability management, and why misconfiguration still drives most cloud breaches.
Jan 31, 20267 min read
Open Source Security
Finding vulnerable .NET dependencies with dotnet list pac...
A step-by-step guide to scanning C# projects for vulnerable NuGet packages using dotnet list package --vulnerable, plus how to fix and monitor them continuously.
Jan 31, 20267 min read
Industry Analysis
The Economics of Vulnerability Bounties: Who Wins and Who Loses
Bug bounty programs are a billion-dollar market. But the economics do not work equally well for everyone. A look at who benefits, who gets shortchanged, and what the numbers actually say.
Jan 30, 20266 min read
Vulnerability Analysis
Zimbra Collaboration CVE-2023-37580: XSS Zero-Day Exploited by Four Nation-State Groups
A reflected XSS vulnerability in Zimbra Collaboration was exploited by four distinct threat groups targeting government organizations worldwide. The campaign showed how even 'low severity' bugs enable espionage.
Jan 30, 20265 min read
Infrastructure Security
Rate Limiting in Package Registries: Balancing Security and Developer Experience
Docker Hub's rate limits broke builds worldwide. Rate limiting is necessary for registry security, but getting it wrong disrupts entire engineering organizations.
Jan 30, 20265 min read
Infrastructure Security
Load Balancer Security Considerations for Modern Architectures
Load balancers terminate TLS, distribute traffic, and make routing decisions. Their security configuration affects every service behind them.
Jan 30, 20266 min read
Supply Chain Attacks
JumpCloud Supply Chain Attack: North Korea's Lazarus Group Strikes Again
How North Korean threat actors compromised JumpCloud's infrastructure to target cryptocurrency firms through a sophisticated supply chain attack in July 2023.
Jan 30, 20265 min read
Vulnerability Management
Vulnerability Chaining: Real-World Examples and Defense Strategies
Individual vulnerabilities rarely tell the full story. This deep dive examines how attackers chain low-severity bugs into devastating exploits and how defenders can break the chain.
Jan 30, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.