Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Phones announce themselves in Wi-Fi probe requests. How sensors count and track them, what MAC randomisation fixes, and what it still leaves exposed.
Oblivious HTTP splits who you are from what you ask: a relay sees your IP but not your request, a gateway sees the request but not you. How it works.
Agent Skills are folders with a SKILL.md file that agents load on demand. How the format works, why it saves context, and how to vet a third-party skill.
MCP elicitation lets a server pause a tool call to ask the user for input through a form or a URL. How it works on the wire and how to secure it.
IEC 81001-5-1:2021 sets the security activities for the health software life cycle. See its structure, its SBOM duties and how it maps to FDA rules.
Cisco fixed a 9.8 root RCE in clustered Expressway, CVE-2026-76466, plus 16 grouped Expressway and UC CVEs on 21 Oct. Upgrade to X15.5.20 and 15SU5.
System Management Mode is the x86 firmware mode an SMI enters. See how SMRAM is locked, what SMI handlers do and how to check SMM with fwupd and CHIPSEC.
CVE-2026-114583 lets a crafted tar escape tarfile's 'tar' filter. The fix is merged in CPython git but no Python release ships it yet. What to do now.
Baseband firmware is the separate modem OS that runs a phone's 2G to 5G radio. How it talks to Android and iOS, what it exposes and how it is patched.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
