Cloud Security
AWS Inspector V2 Container Scanning: What Changed and Why It Matters
A deep look at Amazon Inspector v2 for container scanning, its improvements over v1, and how to get the most out of it.
Jan 12, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedArchitecture
Microservices Security Architecture: A Supply Chain Perspective
Microservices multiply your dependency surface. This guide covers service mesh security, inter-service authentication, and dependency management across distributed architectures.
Jan 12, 20267 min read
Data Breach
Twitter Data Breach: 5.4 Million Accounts Exposed Through an API Vulnerability
An API vulnerability in Twitter allowed attackers to link phone numbers and email addresses to Twitter accounts, ultimately exposing data from 5.4 million users — and possibly over 200 million email-account pairs.
Jan 12, 20265 min read
Secure Development
Clippy Rust Security Lints: Catching What the Borrow Checker Misses
Rust's compiler catches memory safety bugs. Clippy catches everything else -- including security anti-patterns the borrow checker does not care about.
Jan 12, 20265 min read
Compliance
Brazil's LGPD and Its Implications for Software Security
Brazil's data protection law creates obligations for software security and supply chain transparency. Here's what developers and vendors should know.
Jan 12, 20266 min read
Industry Analysis
Zero-Knowledge Proofs for Supply Chain Attestation
Where zk-SNARKs, STARKs, and Bulletproofs actually fit in software supply chain attestation, and where conventional signatures remain the correct choice.
Jan 12, 20265 min read
AI Security
Hypothesis Quality: Griffin AI vs Mythos
Two AI bug hunters can both generate hypotheses. Only one can defend them. A field study of grounded versus ungrounded hypothesis generation in zero-day discovery.
Jan 12, 20266 min read
DevSecOps
VEX Explained: How Vulnerability Exploitability Exchange Cuts Through Alert Noise
VEX documents let software producers tell consumers which vulnerabilities actually affect their products. Here's how VEX works and why it matters.
Jan 12, 20267 min read
Application Security
XML Parsing Security: XXE, Billion Laughs, and Beyond
XML's feature richness is its security weakness. XXE, entity expansion, and XSLT injection continue to plague applications that process XML.
Jan 12, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.