Threat Intelligence
UNC5221 Ivanti Exploitation Campaign Analysis
UNC5221 chained Ivanti Connect Secure zero-days through 2024 and 2025. The campaign reads like a masterclass in living off trusted edge appliances.
Mar 13, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedIncident Analysis
Slack 2022-2023 Incidents: Operational Retrospective
Slack disclosed a stolen-token incident over the 2022 holidays and a related GitHub repository access event; the operational lessons apply broadly.
Mar 13, 20267 min read
Cloud Security
What is the Principle of Least Privilege
The principle of least privilege limits every user and system to only the access it needs. Here's how it works and why it matters for cloud security.
Mar 13, 20267 min read
Software Supply Chain Security
Typosquatting Meets AI: The New Threat of AI-Generated Package Names
AI code assistants recommend packages that do not exist, and attackers are registering those hallucinated names. This new typosquatting vector exploits the trust developers place in AI suggestions.
Mar 13, 20267 min read
Regulatory Compliance
CMMC vs NIST 800-171: key differences
CMMC and NIST 800-171 aren't the same thing. We break down the differences, where control families overlap, and how supply chain evidence fits into assessment.
Mar 13, 20268 min read
Industry Analysis
Panther SIEM Supply Chain Rules: A Detection Engineering Playbook
Write Panther Python detections that catch package poisoning, CI token abuse, and registry compromise. Real rule examples, tuning patterns, and alert routing.
Mar 13, 20267 min read
Best Practices
Package Registry Forensic Log Analysis
Extracting investigative signal from package registry logs — publish events, download patterns, and account activity — during a supply chain incident.
Mar 13, 20266 min read
Cloud Security
What is Zero Trust Security
Zero trust means never trusting a user, device, or workload by default. Here's what NIST 800-207 actually requires, why it applies to supply chains too.
Mar 13, 20266 min read
Regulatory Compliance
CMMC vs FedRAMP: which do you need?
CMMC governs DoD contractors; FedRAMP governs federal cloud services. Here's how to tell which you need — and where supply chain security fits versus GRC tools like Secureframe.
Mar 13, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.