Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CISA published four HAPI FHIR CVEs on 22 Oct 2026; three have no fix. Block the cross-tenant partition override now with an interceptor and gateway rule.
Treasure Factory says a database access flaw in its pickup and moving case system exposed 746,277 customer emails on 20 Oct. Facts, timeline and checks.
Park24's final Times Car report: 6,628,007 accounts and 1,464,800 encrypted ID images sent out, a ¥5.5bn loss and a rule to delete images after checks.
OmniBOR gives every file a reproducible gitoid and records each build's inputs in manifests. Learn the format, the ADG, SBOM fields, tooling and limits.
AGNTCY is a Linux Foundation project for finding and messaging AI agents. See how OASF, the Agent Directory, SLIM and identity work, and where trust stops.
AT Protocol keeps your Bluesky identity and signed data on a Personal Data Server. Here is how DIDs, repos and relays work, and how to run your own PDS.
A self-hosted mail server is an SMTP MTA, IMAP server, filter and DNS records. Publish SPF, DKIM, DMARC and MTA-STS; relay if your IP is residential.
TCG DICE gives small chips a hardware identity without a TPM: a secret mixed with a hash of the next code. How layers, certificates and attestation work.
The OpenInfra Foundation hosts OpenStack, Kata Containers, StarlingX and Zuul and is now part of the Linux Foundation. Here is how it is governed and run.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
