Vulnerability Analysis
EternalBlue SMBv1 RCE (CVE-2017-0144)
EternalBlue (CVE-2017-0144) turned a Windows SMBv1 flaw into WannaCry and NotPetya. Here's the risk context, timeline, and fix.
Jan 15, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
Software Transparency and the EU Cyber Resilience Act
The EU Cyber Resilience Act is rewriting the rules for software sold in Europe. Mandatory vulnerability handling, SBOM requirements, and security-by-design obligations are coming for every vendor.
Jan 15, 20268 min read
DevSecOps
Signing container images and generating SBOMs in Azure pi...
A practical walkthrough for Azure container image signing with Notation and ACR content trust, plus generating SBOMs inside Azure DevOps pipelines.
Jan 15, 20267 min read
Industry Guides
Retail and E-Commerce Software Supply Chain Security
E-commerce platforms process millions in transactions daily using open-source components. Here's how retail organizations should manage software supply chain risk.
Jan 14, 20267 min read
Tool Comparisons
Trivy vs Grype: Open Source Vulnerability Scanners Compared
A practical comparison of Trivy and Grype for vulnerability scanning, covering detection accuracy, performance, SBOM support, and real-world usage patterns.
Jan 14, 20265 min read
SBOM
SPDX Specification: A Practical Guide for Security Teams
SPDX is the ISO-standardized SBOM format. Here's how to use it effectively for security, not just license compliance.
Jan 14, 20266 min read
Infrastructure Security
Harbor Registry Security Configuration: A Complete Hardening Guide
Harbor is the most popular open-source container registry. Its security features are powerful but require deliberate configuration to be effective.
Jan 14, 20266 min read
Application Security
CORS Misconfiguration Exploitation: The Silent API Exposure
CORS misconfigurations are one of the most common web security issues. They silently expose your APIs to cross-origin data theft.
Jan 14, 20265 min read
Application Security
Angular Application Security Checklist
A practical security checklist for Angular applications covering XSS prevention, dependency management, and secure configuration.
Jan 14, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.