Industry Analysis
Ukraine 2015 power grid cyberattack: what CISA's report says
On 23 December 2015 attackers opened breakers at three Ukrainian utilities, affecting about 225,000 customers. What happened and what CISA advises.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedIndustry Analysis
Ukraine's December 2015 power outage: what CISA's alert found
The 2015 Ukrainian grid attack left about 225,000 customers without power. What CISA's alert says about access, impact and the defenses it recommends.
Oct 18, 20263 min read
Industry Analysis
The 2002 Trustworthy Computing memo and what it set in motion
Bill Gates sent the Trustworthy Computing memo on 15 January 2002. Four pillars, and the lesson for any company that wants security treated as a priority.
Oct 18, 20263 min read
Industry Analysis
The DAO hack of 2016: what happened and what it taught developers
The 2016 DAO hack explained: a reentrancy bug in splitDAO, about 3.6 million ETH moved, the hard fork that followed, and the lessons for contract developers.
Oct 18, 20263 min read
Industry Analysis
Systemic cyber risk: a concentration checklist for your stack
Systemic risk is many failures from one shared dependency. A checklist to find your concentration points, with examples from CISA and Microsoft sources.
Oct 18, 20263 min read
Industry Analysis
Solar storms and IT: what NOAA says can go wrong
Geomagnetic storms can induce currents in power grids and disrupt GPS and satellites. What NOAA states, and what IT teams can plan for without panic.
Oct 18, 20263 min read
Industry Analysis
After the SolarWinds implant: SAML forgery and service principals
CISA's SolarWinds advisory describes how the actor kept cloud access via service principals, federation trusts and forged SAML tokens. What to review.
Oct 18, 20263 min read
Industry Analysis
Three incidents last quarter, five this one: is that a real change?
Small counts bounce around by chance. A quick Poisson check tells you whether a rise from 3 to 5 incidents means anything before you reorganise the team.
Oct 18, 20263 min read
Industry Analysis
Simpson's paradox in security metrics: when the total lies
One team can beat another in every severity group and still look worse overall. A worked patching example of Simpson's paradox and how to avoid it.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.