2026
Safeguard articles tagged "2026" — guides, analysis, and best practices for software supply chain and application security.
42 articles
Dependency Confusion Five Years In: Evolution
Dependency confusion turned five in 2026. We look at how the attack has evolved, why it still works, and what defenders have actually learned.
AI Coding Assistant Data Leak Incidents Trend
AI coding assistants are now standard developer tooling. The incident data from 2025 and early 2026 shows a recurring pattern of source code, credential, and customer data leaking through them.
CMMC 2.0 Rollout: Where Deadlines Actually Are
A senior engineer's guide to where CMMC 2.0 deadlines actually sit in 2026, what assessors are looking for, and how supply chain controls fit into the certification path.
Open Source Maintainer Targeting Trend
Open source maintainers are now a primary target for state and criminal actors. We trace the 2026 social engineering, infrastructure, and credential patterns.
Model Substitution Attacks: An Emerging Pattern
An attacker who can swap the model behind an API call can read every prompt and shape every response. The emerging trend in 2026 is model substitution as an attack class with its own techniques and disclosures.
NYDFS 500 Software Supply Chain Implications
A senior engineer's view of how NYDFS Part 500 amendments through 2025 and 2026 reshape software supply chain expectations for regulated financial institutions.
CI/CD Platform Attack Trends 2026
CI/CD platforms have become high-value supply chain targets. We analyze 2026 attack trends, including runner abuse, action poisoning, and OIDC token theft.
Prompt Injection From Research To Bug Bounty
Prompt injection started as a research curiosity. In 2026 it is a regular line item on bug bounty leaderboards, with payout norms, scope definitions, and a maturing triage culture.
India CERT-In Software Supply Chain Update
A senior engineer's view of how CERT-In directives in 2025 and 2026 are reshaping software supply chain expectations for organizations operating in India.
Container Image Supply Chain Incidents 2026
Container image supply chain incidents have grown in frequency and impact. We analyze the 2026 patterns, the registry tradecraft, and what defenders should change.
Vector Database Poisoning Trend Watch
Vector databases are now central infrastructure for retrieval-augmented AI. The 2026 attack trend targets the index itself, not the model — and most defenders are not watching the right layer.
SEC Cyber Disclosure Rules: Year Two
A senior engineer's view of the second-year impact of SEC cybersecurity disclosure rules, what filings actually look like, and where supply chain risk fits in.