AI Security
NIST AI RMF explained: Govern, Map, Measure and Manage
The NIST AI RMF has four functions: Govern, Map, Measure and Manage. Here is what each one asks a team to do and how they fit together in practice.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
The 12 generative AI risks in NIST AI 600-1, explained
NIST's Generative AI Profile names 12 risks unique to or worsened by generative AI. Here is each one in plain words and what to check first.
Oct 18, 20263 min read
AI Security
Multimodal prompt injection: instructions hidden in images and files
Models that read images, PDFs and metadata can be steered by text a person never sees. What OWASP says about multimodal risk and how to reduce exposure.
Oct 18, 20263 min read
AI Security
Multi-turn attacks and persistent memory in LLM apps
Session poisoning, memory persistence and delayed triggers let an attack unfold across turns. What to watch and how to limit what memory can carry forward.
Oct 18, 20263 min read
AI Security
Multi-tenant RAG: permission-aware retrieval so users see only theirs
A shared vector store can return one customer's content to another. How permission-aware retrieval, partitioning and audit logs keep RAG tenants apart.
Oct 18, 20263 min read
AI Security
Moderating streamed LLM output: what can go wrong
Streaming makes chat feel fast but complicates output filters. Three designs for checking streamed replies, with the trade-offs of each one explained.
Oct 18, 20263 min read
AI Security
Metrics for AI alert triage: look beyond time saved
Time saved is easy to count and easy to misread. Track misses, agreement with senior analysts and analyst edits to see whether AI triage is safe.
Oct 18, 20263 min read
AI Security
When an AI support assistant became an account recovery hole
In 2026 attackers reportedly used Meta's AI support assistant to reset Instagram accounts. What was reported and how to design safe AI account recovery.
Oct 18, 20263 min read
AI Security
MCP tool list changes: how agent permissions drift over time
MCP servers can announce that their tools changed. Without a review step, an agent's capabilities can grow unnoticed. How to detect and control it.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.