Security Guides
Credential stuffing vs brute force vs password spraying
Three password attacks that look alike but need different defenses. How each works and which controls help: MFA, breached-password checks, rate limits.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Credential Guard on Windows 11: what it protects on a dev machine
Credential Guard isolates NTLM hashes and Kerberos tickets with virtualization-based security. Here is what it covers, which editions have it, what breaks.
Oct 18, 20263 min read
Security Guides
Hardening creator accounts against takeover via email and recovery
Creator accounts are valuable targets. Protect recovery flows, require fresh sign in for email changes and watch for stolen sessions before payouts move.
Oct 18, 20263 min read
Security Guides
Could a vulnerability scanner have caught the xz backdoor?
A scanner matches known advisories, and the xz backdoor had none until it was found. Here is what scanning can and cannot catch, and what helps instead.
Oct 18, 20263 min read
Security Guides
The cookies permission: what a Chrome extension can actually read
An extension needs the cookies permission plus host permissions to touch a site's cookies. What that grants, what HttpOnly changes, and what to check.
Oct 18, 20263 min read
Security Guides
What container image scanning cannot see
Image scanners cover recognised OS and language packages. They miss runtime behaviour, hand built software, unknown flaws and bad cluster settings.
Oct 18, 20263 min read
Security Guides
Consent phishing: how to review risky OAuth apps in your tenant
Consent phishing tricks users into granting an OAuth app access instead of stealing a password. How to spot risky apps and revoke them in your tenant.
Oct 18, 20263 min read
Security Guides
Conference travel security checklist for laptops and phones
Conference travel checklist: what to carry, how to set up laptops and phones before you go, public network habits, border advice, and checks on return.
Oct 18, 20263 min read
Security Guides
Compromised mailbox response checklist for Microsoft 365
Ordered checklist for a hijacked Microsoft 365 mailbox: disable, revoke sessions, check MFA devices, app consents, roles and forwarding, then investigate.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.