Vulnerability Analysis
What is Cross-Site Request Forgery (CSRF)
CSRF forges an authenticated request using a victim's own session cookie. Learn how it works, real Gmail/YouTube cases, and how to detect and fix it.
Mar 31, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
Git Alias: Faster Workflows Without Sacrificing Security
A git alias turns a long command into a short one. Used well they save keystrokes; used carelessly they hide risky flags. Here is how to build aliases you can trust.
Mar 31, 20266 min read
Compliance
CMMC 2.0 compliance for containerized workloads
CMMC 2.0 enforcement is phasing in through 2028. Hardened container images help, but 35+ of 110 NIST 800-171 controls need continuous evidence Chainguard's approach doesn't cover.
Mar 31, 20268 min read
Vulnerability Analysis
Paragon Partition Manager BYOVD: CVE-2025-0289 Kernel-Level Exploitation
Five vulnerabilities in Paragon Partition Manager's kernel driver were exploited in BYOVD attacks, allowing attackers to gain SYSTEM privileges on Windows systems. Microsoft added the driver to its blocklist.
Mar 31, 20266 min read
Vulnerability Analysis
What is Server-Side Request Forgery (SSRF)
SSRF turns a server's own trusted network position against it. Learn how the Capital One breach happened, real CVEs, and how to detect and prevent it.
Mar 31, 20266 min read
Open Source
react-number-format: A Security Guide for Safe Input Handling
react-number-format is a popular library for formatting numeric and masked inputs. Here is how to use it without opening XSS or validation gaps.
Mar 31, 20265 min read
Compliance
SOC 2 and the hardened software supply chain
SOC 2 attests to internal controls, not to whether a hardened image or build pipeline is secure. Here is how Chainguard's approach fits, and what it does not cover.
Mar 31, 20268 min read
Security
Hacking for Dummies: A Plain-English Guide to How Attacks Work
A beginner-friendly, defensive introduction to hacking: what the word means, how attackers actually break in, and how to start thinking like a defender.
Mar 31, 20266 min read
AppSec
SAST Definition: What Static Application Security Testing Actually Means
The SAST definition, in plain terms: analyzing source code for vulnerabilities without running it. Here is how it works, what it catches, and where it falls short.
Mar 31, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.