Security
CVE-2022-31159: Path Traversal in the AWS SDK for Java
CVE-2022-31159 is a partial path traversal flaw in the AWS SDK for Java v1's S3 TransferManager. Here is who it affects, how it works, and how to fix it.
Apr 5, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
CVE-2017-13766 and the Profinet Protocol: What the Wireshark Flaw Means
CVE-2017-13766 is an out-of-bounds write in Wireshark's Profinet I/O protocol dissector. Here is what it affects, why it matters, and how to fix it.
Apr 5, 20266 min read
Security
What Is a Code Injection Attack and How Do You Prevent It?
A code injection attack tricks an application into running attacker-supplied code as if it were trusted. Here is how the class works and how to shut it down.
Apr 5, 20266 min read
Security
How a Code Error Solver Helps You Fix Bugs Without Adding Risk
A code error solver turns cryptic stack traces into fixes, but the tempting one-line patch it hands you can quietly introduce a vulnerability. Here is how to use one safely.
Apr 5, 20266 min read
Security
What Is a Code Analyzer? A Practical Security Guide
A code analyzer inspects source or compiled code for bugs and security flaws before they ship. Here is how the different types work and where they fit in a pipeline.
Apr 5, 20267 min read
Open Source
Is the Cheerio npm Package Safe? A Security Review
A practitioner's look at the cheerio npm package: what it does, where its real security risk lives, and how to use it safely in production scrapers and parsers.
Apr 5, 20266 min read
Security
Checkmarx Braga: How the Portugal R&D Hub Shapes Its AppSec Platform
Checkmarx Braga is one of the vendor's engineering centers, and it helps explain how the company builds its SAST and application security tooling. Here is what that means for teams evaluating the platform.
Apr 5, 20266 min read
Security
AWS DevOps Security Best Practices: A Practical Guide
The AWS DevOps security best practices that matter most are least-privilege IAM, immutable pipelines, and shifting scanning left into CI. Here is how to apply them without slowing delivery.
Apr 5, 20266 min read
AppSec
API Scanner Tools: How They Work and How to Choose One
An API scanner tool probes your endpoints for authentication gaps, injection flaws, and data exposure before attackers do. Here is how the scanning works and what to look for when picking one.
Apr 5, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.