Industry Analysis
Volt Typhoon: Living-Off-the-Land and Supply Chain
The PRC-linked pre-positioning group that scared DHS and the NSA into a public warning, and what it means for supply chain defenders.
Mar 11, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedIndustry Analysis
Code Signing Key Theft Trend Watch
Code signing key theft has surged across 2025 and 2026. We trace the recurring incident patterns, the operator tradecraft, and the structural defenses that work.
Mar 11, 20268 min read
Industry Analysis
Open Source Foundation Governance Models
The Linux Foundation, Apache Software Foundation, CNCF, and Eclipse each codify different theories of how open source projects should be governed. The differences matter more than most adopters realize.
Mar 11, 20266 min read
Industry Analysis
Pharma Clinical Trials Software Supply Chain
Clinical trial software underpins regulatory submissions worth billions. Here is the supply chain program that protects trial data integrity end-to-end.
Mar 10, 20267 min read
Industry Analysis
State of AI Security in Enterprise 2026
Where enterprise AI security actually stands in 2026: model supply chain risks, agent threats, governance gaps, and the controls that measurably reduce exposure.
Mar 10, 20269 min read
Industry Analysis
Datadog Security for Supply Chain Monitoring
Using Datadog's Cloud SIEM, ASM, and logs pipeline to monitor software supply chain threats across CI/CD, registries, and runtime.
Mar 9, 20267 min read
Industry Analysis
Labyrinth Chollima and Open Source Targeting
Labyrinth Chollima's operations show a specific pattern — poisoned open source packages as initial access. A profile of the tradecraft and the defensive response.
Mar 8, 20266 min read
Industry Analysis
New Relic Security: Building a Supply Chain View
How to extend New Relic's APM and Vulnerability Management features into a working software supply chain dashboard for security and platform teams.
Mar 7, 20267 min read
Industry Analysis
SolarWinds Post-Incident Governance Changes Reviewed
Four years after SUNBURST, SolarWinds has rebuilt its SDLC around signed pipelines, parallel builds, and a new CSO office. How much of it is real?
Mar 6, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.