Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A threat intelligence site reported on 6 October 2026 that the Everest group issued an extortion notice naming Kennametal. No company statement or filing was found.
Keio Corporation said it confirmed a ransomware attack in the early hours of 26 September 2026. Here is what the company has confirmed, what is reported, and what is still unknown.
Meta says one employee's stolen credentials exposed code and personal data of about 1,500 people. Here's how to list and revoke every token, key and app that reaches your GitHub org.
Okta analysed 7GB of free infostealer logs from 5,871 machines and found 44,791 JWTs, including AI service sessions that could be replayed without a password or MFA.
Attackers chained two SMA1000 flaws before fixes existed. SonicWall says patching alone is not sufficient. CISA listed both on 14 July 2026.
A 2023 ownCloud WebDAV flaw was added to CISA KEV on 27 August 2026, after hunt.io found an operator using it to collect files from an exposed server.
A breach at CEVA's European contract logistics operations exposed order data held on behalf of Bol, Valve, ING and others. What the incident says about data you hand to vendors.
McKesson confirmed unauthorized access to third-party applications and data exfiltration in August 2026. The 284 million record figure and the attack chain come from the attacker, not the company.
Lidl said unknown individuals briefly accessed a separately stored customer file at a service provider in July 2026. What was and was not exposed, and the controls that limit such files.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
