Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (725)AI Security (786)Vulnerability Analysis (725)Security (523)DevSecOps (497)Application Security (490)Tool Comparison (454)Open Source Security (412)Industry Analysis (310)AppSec (309)Compliance (304)Container Security (284)Open Source (252)Best Practices (252)Cloud Security (239)Buyer's Guides (216)Software Supply Chain Security (178)Incident Analysis (139)Regulatory Compliance (138)Vulnerability Management (136)Security Guides (124)Ranking (116)Concepts (116)Product (101)Containers (100)Supply Chain Attacks (93)SBOM (76)Vulnerabilities (72)Threat Intelligence (66)Supply Chain Security (55)Supply Chain (55)Infrastructure Security (52)Tools (50)FAQ (50)SBOM & Compliance (41)Comparisons (32)Licensing (26)Tutorials (24)Engineering (24)Ransomware (24)Guides (22)Kubernetes Security (22)SecOps (21)Vulnerability Guides (20)Regulation (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Threat Research (16)Risk Management (16)Vulnerability Response (16)Tool Reviews (16)Agent Security (16)Compliance & Frameworks (15)Identity Security (15)Incident Response (15)Security Concepts (15)Cryptography (15)Industry Events (14)Security Strategy (13)Frameworks (12)Dependency Security (11)Data Breach (11)Web Security (11)Career (10)Security News (10)Enterprise (9)Company (9)Culture (9)Strategy (8)Architecture (8)Standards (8)Zero-Day Exploits (7)Industry Insights (7)How-To Guide (7)Network Security (7)Dependency Management (7)Industry Trends (7)Secure Development (7)Developer Security (6)Vendor Comparison (6)Dev Practices (6)Organizational Security (6)Security Operations (6)Industry (6)Research (6)Code Security (5)Breach Analysis (5)Tool Comparisons (4)Policy (4)Mobile Security (4)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Software Supply Chain (3)Governance (3)Analysis (3)Hardware Security (3)Regional Security (3)Startup Security (3)Social Engineering (3)Build Security (3)Healthcare Security (3)Vulnerability Research (3)Policy & Compliance (3)Threat Actors (2)Industry News (2)Security Architecture (2)API Security (2)SBOM Standards (2)Zero-Day Analysis (2)Release (2)DeFi Security (2)Security Culture (2)SBOM and Compliance (2)Security Management (2)Runtime Security (1)Browser Security (1)Product Update (1)Architecture Security (1)PKI Security (1)Events (1)Privacy (1)Language Security (1)Tools & Platforms (1)Emerging Threats (1)Incident Postmortem (1)Career Development (1)Credential Attacks (1)Threat Analysis (1)Privacy & Security (1)Healthcare (1)Nation-State Threats (1)Lifecycle Management (1)Business Continuity (1)Threat Modeling (1)Tools & Techniques (1)SBOM & Standards (1)Technical (1)

Articles

RSS feed
Vulnerability Analysis

libwebp animated WebP overflow (CVE-2023-5129)

CVE-2023-5129 exposed a critical libwebp heap overflow, then got rejected as a duplicate of CVE-2023-4863 — leaving two CVE trails for one flaw.

Jan 7, 20268 min read
Vulnerability Analysis

Dirty Pipe (CVE-2022-0847): A Deep Dive into the Linux Kernel Vulnerability

Dirty Pipe allowed any local user to overwrite data in read-only files, including SUID binaries, leading to trivial root escalation. The bug was elegant, dangerous, and surprisingly recent.

Jan 6, 20265 min read
Vulnerability Analysis

SAP ICM CVE-2022-22536: ICMAD Vulnerabilities Hit the Heart of Enterprise Software

CVE-2022-22536 scored a perfect CVSS 10.0, allowing unauthenticated request smuggling in SAP's Internet Communication Manager. Tens of thousands of SAP systems were at risk.

Jan 6, 20266 min read
Vulnerability Analysis

Express qs library prototype pollution DoS (CVE-2022-24999)

CVE-2022-24999 lets attackers pollute Object.prototype through qs, the query-string parser Express relies on, crashing Node.js applications.

Jan 6, 20267 min read
Vulnerability Analysis

lodash merge/mergeWith prototype pollution (CVE-2018-3721)

A deep dive into CVE-2018-3721, the lodash merge/mergeWith prototype pollution flaw: its real-world impact, affected versions, and how to remediate it fast.

Jan 6, 20269 min read
Vulnerability Analysis

Polkit pkexec Privilege Escalation: CVE-2021-4034 (PwnKit)

A 12-year-old memory corruption bug in Polkit's pkexec gave any unprivileged local user instant root access on virtually every major Linux distribution. Here's why it matters.

Jan 6, 20265 min read
Vulnerability Analysis

minimist prototype pollution (CVE-2020-7598)

A deep dive into CVE-2020-7598, the minimist prototype pollution vulnerability that rippled across the npm ecosystem, with impact, timeline, and remediation steps.

Jan 6, 20267 min read
Vulnerability Analysis

node-forge prototype pollution/signature verification issue (CVE-2020-7712)

node-forge's RSA signature verification (CVE-2022-24771/24772) and prototype pollution (CVE-2020-7720) let attackers forge trust decisions across X.509, PKCS#7, and PKCS#12 flows.

Jan 6, 20267 min read
Vulnerability Analysis

Detecting Log4Shell in Your Software Supply Chain

Log4j isn't just in your code — it's in your vendors' code, your container base images, and your transitive dependencies. Here's how to find it everywhere.

Jan 5, 20266 min read
Page 78 of 81

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.