Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
As of 28 Oct 2026, 23:10 UTC, per GitHub's advisory database: 106 malicious npm and PyPI packages published 26 to 28 October. What they did, a lockfile check, cleanup steps and install-time blocks.
Linux kernel CVE-2026-46300 (Fragnesia), an IPsec ESP shared-fragment flaw disclosed in May 2026, was newly added to CISA KEV on 28 October 2026 with a 31 October due date and says it can be chained with PHP CVE-2026-109618 and CVE-2026-109619 to run commands as root. Fixed kernel versions per distro, how to check exposure, mitigations and forensic triage.
A certificate authority compromise response runbook for PKI owners and security operations leads: what to do in the first hour, the first 24 hours and the first week after a CA compromise, covering certificate inventory, revocation with CRLs and OCSP, trust store removal, reissuance and verification, grounded in RFC 5280, RFC 6960, the CA/Browser Forum Baseline Requirements and NIST SP 1800-16.
CISA added Adobe Commerce and Magento CVE-2026-48356, an unrestricted file upload flaw, to KEV on 27 October 2026. Here is what is affected, what to patch and what to check.
CVE-2026-113788 lets any Lagoon user run code through the core ssh service. Every version before 2.33.2 is affected. Here is what to patch and check.
Envoy ships a major release every quarter and patches each one for 12 months. Its Lyft origins, CNCF dates, xDS v2 to v3 and how security fixes ship.
A 5G base station is antennas, radio units, baseband split into CU and DU, eCPRI fronthaul, microsecond timing and a big software stack. How it is built.
The IANA tz database turns government clock changes into tzdata releases that ship through OS, runtime and app updates. How it works and how to check yours.
A firewall appliance pairs a general CPU with fast path silicon, a hardened Linux or BSD build, signed images and a management plane kept off the internet.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
