AI Security
Task-Routed LLM Architectures For Security
One model for every task wastes budget on trivial work. Task-routed architectures match model capability to task requirements — the right lever for security at scale.
Feb 25, 20262 min read
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
One model for every task wastes budget on trivial work. Task-routed architectures match model capability to task requirements — the right lever for security at scale.
A side-by-side security comparison of Windsurf and Sourcegraph Cody: data handling, agent scope, deployment models, and enterprise controls.
Midnight Blizzard moved from email exfiltration to Microsoft source code repositories. The pivot from stolen OAuth tokens to code access is the supply chain lesson.
Generating accurate SBOMs for firmware and IoT devices remains one of the toughest challenges in supply chain security. Here's the current state of the art.
Midnight Blizzard (APT29, Cozy Bear) has refined long-dwell supply chain access into an operational art. Here is what their 2023-2025 pattern looks like to defenders.
How EU DORA is reshaping software supply chain expectations for financial services in 2026, with practical guidance on ICT third-party risk, SBOMs, and incident reporting.
A technical breakdown of CVE-2024-45519, the unauthenticated RCE in Zimbra's postjournal service, how it was exploited in the wild, and what defenders should take away.
Retrieval context poisoning scales differently than direct prompt injection. The attacker's leverage grows with the RAG ingest surface.
Gemini's multimodal capabilities are genuinely useful for some security workflows. For most security workflows, the modality is code and text, not images.
Weekly insights on software supply chain security, delivered to your inbox.