AI Security
Model Substitution Risk In Enterprise Deployments
The model you think you're calling might not be the model that returns. Model substitution is a quiet supply chain risk that deserves explicit controls.
Mar 4, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
What is Prompt Injection
Prompt injection is OWASP's #1 LLM risk. Learn how it works, real CVEs like EchoLeak, and how to detect and defend against it.
Mar 4, 20268 min read
AI Security
AI-Based Security: What the Label Actually Means on a Product Page
AI-based security is used to describe everything from a genuinely trained detection model to a marketing rewrite of a rules engine. Here's how to tell what you're actually buying.
Mar 4, 20265 min read
AI Security
Direct vs Indirect Prompt Injection
Direct and indirect prompt injection are different attack vectors with different blast radii. Real 2025 CVEs like EchoLeak show why the distinction matters.
Mar 4, 20267 min read
AI Security
What is LLM Jailbreaking
LLM jailbreaking bypasses AI safety guardrails through techniques like DAN prompts, Crescendo, and Skeleton Key — here's how it works and how to defend against it.
Mar 4, 20266 min read
AI Security
What is AI Model Supply Chain Security
Model weights are executable artifacts, not data. Here's how AI model supply chain attacks work, from pickle exploits to weight tampering, and how to stop them.
Mar 4, 20267 min read
AI Security
Transitive Fix Cascades: Griffin AI vs Mythos
A vulnerable transitive dependency may require upgrading an ancestor. Griffin AI computes the cascade; Mythos-class tools often stop at the first level.
Mar 3, 20267 min read
AI Security
RAG Poisoning In The Wild: Trend Watch
Retrieval-augmented generation was the 2024 success story. 2026 is when RAG poisoning moved from research to production incidents.
Mar 3, 20262 min read
AI Security
What is Model Context Protocol (MCP) Security
MCP security explained: how tool poisoning, rug pulls, and 2025's critical CVEs (mcp-remote, MCP Inspector) put AI agents at risk—and how to defend against them.
Mar 3, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.