Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (7845)AI Security (784)Vulnerability Analysis (574)Security (522)DevSecOps (496)Application Security (484)Open Source Security (412)AppSec (306)Compliance (302)Industry Analysis (295)Container Security (284)Open Source (252)Best Practices (252)Cloud Security (239)Buyer's Guides (216)Software Supply Chain Security (178)Incident Analysis (139)Regulatory Compliance (138)Vulnerability Management (135)Security Guides (124)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (76)Vulnerabilities (72)Product (69)Threat Intelligence (65)Supply Chain Security (55)Supply Chain (55)Infrastructure Security (52)Tools (50)FAQ (50)SBOM & Compliance (41)Comparisons (32)Licensing (26)Engineering (24)Tutorials (24)Ransomware (24)Kubernetes Security (22)Guides (22)SecOps (21)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Case Studies (18)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Agent Security (16)Vulnerability Response (16)Threat Research (16)Risk Management (16)Tool Reviews (16)Cryptography (15)Compliance & Frameworks (15)Security Concepts (15)Identity Security (15)Incident Response (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Career (10)Company (9)Culture (9)Enterprise (9)Standards (8)Strategy (8)Architecture (8)Secure Development (7)Industry Insights (7)Industry Trends (7)How-To Guide (7)Zero-Day Exploits (7)Network Security (7)Dependency Management (7)Industry (6)Vendor Comparison (6)Dev Practices (6)Security Operations (6)Research (6)Organizational Security (6)Developer Security (6)Breach Analysis (5)Code Security (5)Product Launch (4)Policy (4)Cryptocurrency Security (4)Tool Comparison (4)Mobile Security (4)Offensive Security (4)Tool Comparisons (4)Build Security (3)Healthcare Security (3)Governance (3)Social Engineering (3)Vulnerability Research (3)Regional Security (3)Policy & Compliance (3)SBOM Standards (3)Software Supply Chain (3)Analysis (3)Startup Security (3)Hardware Security (3)Zero-Day Analysis (2)Industry News (2)Release (2)SBOM and Compliance (2)Security Management (2)Threat Actors (2)API Security (2)Security Architecture (2)Security Culture (2)DeFi Security (2)Incident Postmortem (1)Technical (1)Product Update (1)Healthcare (1)Language Security (1)Emerging Threats (1)Privacy (1)Events (1)Lifecycle Management (1)Career Development (1)Tools & Platforms (1)Threat Modeling (1)Browser Security (1)Threat Analysis (1)Business Continuity (1)Runtime Security (1)Credential Attacks (1)PKI Security (1)Architecture Security (1)Nation-State Threats (1)Tools & Techniques (1)Privacy & Security (1)

Articles

RSS feed
Software Supply Chain Security

Software supply chain security for medical devices

How FDA premarket cybersecurity rules, medical device SBOMs, and firmware vulnerabilities like Ripple20 and SweynTooth are reshaping supply chain security for connected medical devices.

Jan 3, 20267 min read
Vulnerability Analysis

PrintNightmare CVE-2021-34527: The Windows Print Spooler Bug That Haunted Every Enterprise

PrintNightmare gave attackers SYSTEM-level access through the Windows Print Spooler service running on nearly every Windows machine. The patch rollout was a mess.

Jan 2, 20267 min read
Incident Response

Kaseya VSA Ransomware: Supply Chain Attack Hits 1,500 Businesses

REvil exploited Kaseya's VSA platform to push ransomware to managed service providers and their customers. Up to 1,500 businesses were hit in a single weekend.

Jan 2, 20265 min read
Data Breach

Facebook Data Leak: 533 Million Users Exposed Through a Contact Import Feature

Personal data from 533 million Facebook users across 106 countries was posted on a hacking forum, exposing phone numbers, emails, and personal details scraped through a contact import vulnerability.

Jan 2, 20265 min read
Application Security

MessagePack Security Implications: Binary Serialization Risks

MessagePack is faster than JSON but shares some of JSON's security pitfalls while adding new ones. Here is what to watch for.

Jan 2, 20265 min read
Risk Management

Disaster Recovery Planning for Software Supply Chain Incidents

When a supply chain attack hits, your DR plan needs to cover more than just infrastructure failover. Here is how to prepare for the worst.

Jan 2, 20267 min read
Zero-Day Exploits

Microsoft Exchange HAFNIUM Attack: Four Zero-Days That Compromised 30,000 Organizations

Chinese state-sponsored group HAFNIUM exploited four zero-day vulnerabilities in Microsoft Exchange Server, compromising an estimated 30,000 US organizations and hundreds of thousands globally.

Jan 2, 20265 min read
Compliance & Regulations

NIST SSDF Framework: A Practical Guide

The Secure Software Development Framework (SSDF) is becoming the baseline for federal software security. Here's what it contains and how to implement it.

Jan 2, 20266 min read
Zero-Day Exploits

Pulse Secure VPN Zero-Day CVE-2021-22893: When Your Security Gateway Becomes the Backdoor

Chinese APT groups exploited CVE-2021-22893 in Pulse Secure VPN to breach defense contractors and government agencies. The irony of a security product being the entry point.

Jan 2, 20266 min read
Page 868 of 872

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

Blog (Page 868) | Safeguard — Software Supply Chain Security Insights