Supply Chain Security
In-depth guides and analysis on supply chain security from the Safeguard engineering team.
100 articles
Lawful Interception Explained: ETSI, 3GPP LI, CALEA and Wiretap Risk
How lawful interception works: ETSI HI1, HI2 and HI3, 3GPP TS 33.126 to 33.128, what CALEA requires, and why built in wiretaps need hard security controls.
Gallium and Germanium Explained: Sources, Chip Uses and Export Controls
Gallium and germanium come from alumina and zinc refining, are key to GaN, GaAs, fibre and infrared optics, and need China export licences since 2023.
RNBP Cyberattack: Portugal's Firefighter Register and 60,000 Records
ANEPC confirmed a cyberattack on RNBP, Portugal's firefighter register, with ID, tax, health and blood group data possibly copied. What is known and what to do.
Apache Traffic Server Fixes 15 CVEs: magick Plugin CVE-2026-111813
Apache Traffic Server 9.2.16, 10.1.5 and 10.2.1 fix 15 CVEs, four rated CVSS 10. None are exploited or in KEV. Upgrade and check plugin.config now.
KMIP Explained: TTLV, Objects, Operations and How to Secure It
KMIP is the OASIS protocol that storage arrays and databases use to ask a key server to create, fetch, rotate and destroy keys over TLS on port 5696.
Meshtastic Explained: LoRa Mesh, Channels, Encryption and MQTT
Meshtastic is open source LoRa mesh messaging with no gateways. How channels, AES keys, MQTT bridging and roles work, and how to lock down a node.
EST and SCEP Explained: Device Certificate Enrollment and Security
EST (RFC 7030) and SCEP (RFC 8894) let devices without DNS names get certificates. How each works, where CMP and ACME fit, and how to lock them down.
TrueNAS Release History: FreeNAS, CORE, SCALE and Community Edition
TrueNAS 25.10.7 is the current General release and 27 is at RC.1. Every TrueNAS line from FreeNAS to Community Edition, with bases, apps and support.
Chrome and Chromium Release History: Channels, Cadence and Security
Chrome launched in 2008, moved to six week, four week and now two week milestones, and added sandboxing, site isolation and HTTPS defaults along the way.
OpenSSH Release History 1999 to 10.x: Security Changes by Version
OpenSSH began as an OpenBSD fork in 1999 and reached 10.6 in October 2026. Every major version, its date and the security defaults it changed.
Antimony Explained: Sources, Uses, Solar Glass, Chips and Export Controls
Antimony comes from stibnite mined in China, Russia and Tajikistan, feeds flame retardants, batteries, glass and chips, and faces China export licences.
Oracle Linux and UEK Release History: Versions, Ksplice and Support Dates
Oracle Linux 8 Premier Support runs to July 2029, 9 to June 2032 and 10 to June 2035. Every release, every UEK kernel and how Ksplice patching works.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.