Exfiltration to a Code Repository: Detecting It (T1567.001)
Data can leave over HTTPS to GitHub-style APIs and look like developer traffic. What MITRE documents for T1567.001, and how to detect and restrict it.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Data can leave over HTTPS to GitHub-style APIs and look like developer traffic. What MITRE documents for T1567.001, and how to detect and restrict it.
Data theft that hides in HTTPS traffic to popular services. What MITRE documents for T1567, the signals that matter, and how its four subtechniques fit together.
Voice phishing talks users into giving access, often with MFA prompts. What MITRE documents for T1566.004, how to spot it, and what training should cover.
Attackers reach staff through social media and personal webmail that your mail gateway never sees. What MITRE documents for T1566.003 and what to do.
How phishing links, lookalike domains and OAuth consent requests work, the logs that expose them, and the five mitigations MITRE lists for T1566.002.
How malicious email attachments lead to code execution, the process chains that expose them, and the five mitigations MITRE lists for T1566.001.
Phishing is delivered social engineering through email, services, voice and more. What MITRE documents for T1566, how to detect it, and five mitigations.
Tampering with the app that displays data changes what people see without touching the data. MITRE T1565.003 detection, mitigation and a supply chain link.
Altering data on its way between systems can change business decisions without touching storage. What MITRE says about T1565.002 and how to defend.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.