Containers
Go and Docker: Building Secure Container Images
Go and Docker pair well because Go compiles to a static binary that fits in a tiny, near-empty image. This guide shows how to build that image securely.
May 27, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Dependencies Meaning: What Are Software Dependencies?
The meaning of dependencies in software is straightforward: they are the external code your project relies on to work. Here is what that includes, why transitive dependencies matter, and how they become a security problem.
May 27, 20266 min read
Open Source
babel-jest: What It Does and How to Keep Your Test Toolchain Safe
babel-jest npm sits in almost every Jest install, quietly transforming your code before tests run. Here is what it does and why test toolchains deserve supply chain attention.
May 27, 20266 min read
AppSec
How to Run a Website Security Check (Free and Paid Methods)
A step-by-step website security check using free tools and paid platforms, from a quick URL scanner pass to authenticated scans and dependency analysis.
May 27, 20266 min read
Cryptocurrency Security
Fake Uniswap Google Ads Drained $400K: The Search-Ad Wallet Drainer Surge of May 2026
On May 26, 2026, on-chain investigators flagged a fake-Uniswap phishing operation that used Google search ads and lookalike domains to drain at least $400,000 by tricking users into signing malicious token approvals.
May 27, 202610 min read
Healthcare Security
Eppendorf BioFlo 320 Bioreactor: A Hard-Coded VNC Password Earns CVSS 9.8 (CISA ICSMA-26-146-01, May 2026)
CISA's May 26, 2026 medical advisory flags CVE-2026-7251, a hard-coded VNC password in all versions of the Eppendorf BioFlo 320 bioreactor. A remote attacker who reaches the device gets full control of cell-culture and bioprocess parameters. We break down the flaw and the fix.
May 27, 202611 min read
Open Source
npm request: Why the Package Is Deprecated and What to Use
The npm request package and its request-promise wrapper have been deprecated since February 2020. Here is what that means for your security posture and how to move off them safely.
May 27, 20266 min read
Security
Vulnerability Management Services: What They Do and How to Choose
Vulnerability management services promise to find, prioritize, and track your security weaknesses so you don't have to. Here is what they actually cover, where the gaps are, and what to ask before you buy.
May 27, 20266 min read
SBOM
The Gap Between SBOM Generation and SBOM Consumption
Most companies generate SBOMs to satisfy a compliance checkbox, then let them sit unread. Here is why SBOM consumption lags generation, and how to close the gap.
May 27, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.