AI Security
Data Exfiltration via LLM Agents in 2026
Tool-using agents have become a viable exfiltration channel. The patterns showing up in incident reports, and the controls that contain them.
May 6, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
AI Endpoint Security: How Machine Learning Changes Endpoint Defense
AI endpoint security uses machine learning to detect threats by behavior rather than signatures. Here is what it actually does, where it helps, and its limits.
May 6, 20266 min read
DevSecOps
Argo CD Image Updater Security Considerations in 2026
How Argo CD Image Updater works, the security tradeoffs of automated image promotion, and the configuration patterns that prevent supply chain incidents.
May 6, 20266 min read
AI Security
AI Cybersecurity Tools and Solutions: The 2026 Landscape
AI cybersecurity tools in 2026 split into three real categories — AI-augmented detection, AI-specific application security, and autonomous response — and most vendors only actually cover one.
May 6, 20265 min read
DevSecOps
Azure DevOps Pipeline Supply Chain Hardening 2026
A 2026 hardening guide for Azure DevOps Pipelines: service connections, workload identity federation, approval gates, agent isolation, and SLSA integration.
May 6, 20265 min read
Vulnerability Analysis
Text4Shell RCE in Apache Commons Text CVE-2022-42889
CVE-2022-42889 (Text4Shell) is a 9.8-severity RCE in Apache Commons Text 1.5-1.9. Learn affected versions, timeline, and remediation steps.
May 6, 20267 min read
AI Security
AI Code Security Solutions: What to Evaluate Before Buying
AI code security solutions range from AI-assisted scanning to AI-generated fixes — here's what to actually test before trusting one with your pipeline.
May 6, 20266 min read
Tools
Checkmarx vs WhiteSource (Mend) Buyer Comparison 2026
A 2026 head-to-head buyer comparison of Checkmarx and Mend (formerly WhiteSource): SCA depth, SAST, reachability, AI features, pricing, and decision framework.
May 6, 20266 min read
Application Security
SonarQube SCA Capability Review 2026
A working review of SonarQube's SCA capability in 2026, comparing it against dedicated SCA tools on coverage, reachability, policy depth, and developer experience.
May 6, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.