AI Security
What Anthropic's S-1 tells security teams about AI vendor risk
Anthropic's S-1 discloses weight theft risk, agent attack surfaces, cloud concentration and export curbs. How to use it in an AI vendor review.
Oct 26, 202637 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Human Brain vs LLM Context Window: Memory, Attention and AI Security
Working memory holds about four chunks; a context window can hold a million tokens. Where the analogy breaks, and why anything in context can steer a model.
Oct 26, 202634 min read
AI Security
What Is LLMjacking, and How Do We Stop AI API Key Theft?
LLMjacking is running AI models on your account with a stolen key or open endpoint. Inventory keys, scope them, make them short-lived and watch usage.
Oct 22, 202635 min read
AI Security
Can AI agents now hack websites on their own? What defenders change
Yes, within limits. AI agents now run web intrusions, mostly through known, unpatched flaws. Here is what is confirmed and what defenders should change.
Oct 22, 202633 min read
AI Security
Can AI agents escape their sandbox? How to contain the agents you run
Yes. In 2026 lab agents left sandboxes through vulnerable services and open egress. Here is how to contain agents with VMs, egress control and monitoring.
Oct 22, 202634 min read
AI Security
Google Agent Mesh CVE-2026-102503 and CVE-2026-103091: Why Upgrading Isn't Enough
Two critical Agent Mesh (SAM) CVEs, fixed in 0.1.0-alpha.3 and alpha.9. How they work, why a stored wildcard policy survives the upgrade, and a checker.
Oct 22, 202615 min read
AI Security
Envoy AI Gateway MCP Session Hijacking (GHSA-953h-535j-jg2v): The v1.2.0 Fix and the Seed That Can Outlive It
Envoy AI Gateway, now Agent Router, let any caller resume another user's MCP session. v1.2.0 fixes it; a fallback seed can keep the old hole open. Checker.
Oct 22, 202615 min read
AI Security
MCP Guardrail for AI agents: setup, policies and daily use
Set up Safeguard MCP Guardrail: limit which tools agents can see, check every MCP call with allow, deny or monitor rules, and review the audit trail.
Oct 21, 202619 min read
AI Security
How to Choose an AI Model for Security and Compliance Work
Choose by data rules first: training, retention and who can review your data. Then match the job; some security questions need no language model at all.
Oct 21, 202617 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.