Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (786)AI Security (786)Vulnerability Analysis (577)Security (523)DevSecOps (497)Application Security (490)Open Source Security (412)AppSec (309)Compliance (304)Industry Analysis (295)Container Security (284)Open Source (252)Best Practices (252)Cloud Security (239)Buyer's Guides (216)Software Supply Chain Security (178)Incident Analysis (139)Regulatory Compliance (138)Vulnerability Management (135)Security Guides (124)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (76)Vulnerabilities (72)Product (69)Threat Intelligence (65)Supply Chain Security (55)Supply Chain (55)Infrastructure Security (52)Tools (50)FAQ (50)SBOM & Compliance (41)Comparisons (32)Licensing (26)Tutorials (24)Ransomware (24)Engineering (24)Guides (22)Kubernetes Security (22)SecOps (21)Vulnerability Guides (20)Regulation (20)Industry Guides (19)Case Studies (18)Compliance & Regulations (18)Emerging Technology (17)Solutions (17)Threat Research (16)Risk Management (16)Vulnerability Response (16)Tool Reviews (16)Agent Security (16)Security Concepts (15)Cryptography (15)Identity Security (15)Incident Response (15)Compliance & Frameworks (15)Industry Events (14)Security Strategy (13)Frameworks (12)Dependency Security (11)Web Security (11)Data Breach (11)Career (10)Enterprise (9)Company (9)Culture (9)Architecture (8)Strategy (8)Standards (8)Industry Trends (7)How-To Guide (7)Secure Development (7)Industry Insights (7)Dependency Management (7)Zero-Day Exploits (7)Network Security (7)Research (6)Organizational Security (6)Vendor Comparison (6)Dev Practices (6)Industry (6)Security Operations (6)Developer Security (6)Code Security (5)Breach Analysis (5)Policy (4)Cryptocurrency Security (4)Tool Comparisons (4)Offensive Security (4)Mobile Security (4)Tool Comparison (4)Product Launch (4)Analysis (3)Social Engineering (3)Build Security (3)Startup Security (3)Policy & Compliance (3)Hardware Security (3)Governance (3)Software Supply Chain (3)Healthcare Security (3)Vulnerability Research (3)Regional Security (3)Threat Actors (2)Security Culture (2)Security Architecture (2)API Security (2)Zero-Day Analysis (2)SBOM Standards (2)Security Management (2)Release (2)Industry News (2)SBOM and Compliance (2)DeFi Security (2)Tools & Techniques (1)Healthcare (1)Emerging Threats (1)Tools & Platforms (1)Architecture Security (1)Lifecycle Management (1)Privacy (1)Product Update (1)Runtime Security (1)Technical (1)Nation-State Threats (1)Credential Attacks (1)Threat Analysis (1)Incident Postmortem (1)Career Development (1)Privacy & Security (1)Threat Modeling (1)Business Continuity (1)Browser Security (1)Events (1)PKI Security (1)Language Security (1)SBOM & Standards (1)

Articles

RSS feed
AI Security

How to Choose an AI Cybersecurity Company in 2026

An AI cybersecurity company uses machine learning to detect, prioritize, and remediate threats faster than rules alone. Here is how to evaluate one honestly.

May 19, 20265 min read
AI Security

MCP-Led Automation: Securing Model Context Protocol Workflows

MCP-led agent workflows hand real tools to a language model. That power is also the attack surface. Here is how tool poisoning works and how to defend against it.

May 19, 20267 min read
AI Security

Asana MCP Cross-Tenant Leak: A SaaS Connector Failure Mode

From May 1 to June 17, 2025, Asana's MCP server exposed records from one customer's workspace to another. The bug was a textbook authorization break wearing an AI label.

May 18, 20267 min read
AI Security

Keeping secrets out of agent context windows: brokers, scoped tokens, and redaction

Every secret that touches an agent's context window is a secret the agent can leak. Just-in-time credential brokers, scoped-token issuance, and redaction layers keep the surface small without breaking the agent's ability to do real work.

May 15, 20268 min read
AI Security

EchoLeak (CVE-2025-32711): The First Zero-Click LLM Exfiltration in Production

Aim Security's CVE-2025-32711 exfiltrated Microsoft 365 Copilot data via a single crafted email. The XPIA classifier failed, CSP let attackers through, and CVSS 9.3 followed.

May 14, 20266 min read
AI Security

Supply Chain Threat Detection: What to Watch For and How

A practical look at supply chain threat detection: the signals that reveal a compromised dependency, build system, or update channel, and how to catch them early.

May 14, 20267 min read
AI Security

What Platforms Are Using Cybersecurity AI in 2026?

A grounded look at what platforms are using cybersecurity AI today — across SOC tooling, code scanning, and supply-chain security — and how to tell real capability from marketing.

May 14, 20266 min read
AI Security

How to Choose a Software Supply Chain Security Solution in 2026

A software supply chain security solution secures every component that flows into your builds, from open-source dependencies to CI pipelines and artifacts. Here is what one should actually do.

May 14, 20266 min read
AI Security

Claude Code Skills: A Security Guide to SKILL.md and Agent Extensions

Claude Code skills package instructions and scripts an AI agent runs on your behalf. That power is also the risk. Here is how to vet and sandbox them.

May 14, 20267 min read
Page 33 of 88

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.