Application Security
Steganography in Command and Control Traffic (T1001.002)
Steganography hides C2 messages inside images or documents. See how MITRE describes it and how file plus network signals help defenders catch it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Junk Data in C2 Traffic and How to Spot It (T1001.001)
Junk data pads command and control traffic so simple decoding fails. Learn what MITRE says about it and which network signals give it away.
Oct 18, 20263 min read
Application Security
Detecting and Reducing Data Obfuscation in C2 Traffic (T1001)
Data obfuscation hides command and control traffic without always encrypting it. Here is how defenders spot it and which network controls help.
Oct 18, 20264 min read
Application Security
CWE-99 Resource Injection: Attacker-Chosen File and Port Names
Resource injection happens when input decides which file, port or other resource your code touches. CWE-99 explained with a fix.
Oct 18, 20263 min read
Application Security
CWE-98 PHP File Inclusion: How It Happens and How to Fix It
PHP remote file inclusion lets attackers pick the file your include statement loads. How CWE-98 works, what it gives them, and how to close it.
Oct 18, 20264 min read
Application Security
CWE-97 Server-Side Includes Injection Explained
CWE-97 covers user input that a web server reads as a server-side include directive. What it is, what it costs, and how to prevent it.
Oct 18, 20262 min read
Application Security
CWE-96 Static Code Injection: Input Written Into Code Files
Static code injection writes attacker input into a script, template or config that runs later. CWE-96 explained with PHP examples and fixes.
Oct 18, 20263 min read
Application Security
CWE-95 Eval Injection: Why eval() on Input Goes Wrong
Eval injection is code injection through eval and similar calls. Learn how CWE-95 works, the CVEs MITRE cites, and safer replacements.
Oct 18, 20264 min read
Application Security
CWE-943 Data Query Logic Injection: How It Happens and Fixes
SQL injection is the famous case, but any query language can be bent by unneutralized input. This guide covers CWE-943, with NoSQL examples and fixes.
Oct 18, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.