Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
The Codecov Bash Uploader was altered from 31 January to 1 April 2021 and could send CI environment variables out. Here is the timeline and what to change.
Citrix Bleed leaked session tokens from NetScaler appliances and was exploited before the October 2023 fix. See the dated timeline and lessons on sessions.
Citrix Bleed, CVE-2023-4966, let attackers steal live sessions past MFA. Use this checklist to test whether your org would have noticed, and what to fix.
A dated timeline of the 2024 Change Healthcare ransomware attack from public reporting, with controls defenders can check in their own organizations.
What Change Healthcare's own CEO told the Senate about the 2024 attack, turned into ten questions your team can answer this week without blaming anyone.
A calm look at how software contributed to the 2003 blackout and how the 2015 Ukraine outage happened, and what both say about grid risk today.
Past blackouts show software and monitoring failures can contribute to grid events. Read the sourced record and a preparedness checklist for your own site.
Use the public facts of the 2019 Capital One incident to test your own cloud controls: configuration review, least privilege, egress, logging and intake.
Capital One lost data on about 100 million US people in 2019 through a cloud flaw. See the sourced timeline, the OCC findings and what to check.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
