ai-security
Safeguard articles tagged "ai-security" — guides, analysis, and best practices for software supply chain and application security.
593 articles
Techniques for verifying model weight integrity and detec...
A practical guide to model weight integrity: baseline checksums, sign weights, verify in CI/CD, and detect tampering before it reaches production.
Securing the fine-tuning pipeline against injected malici...
Fine-tuning pipeline security is now an AI supply chain priority: as few as 250 poisoned documents can backdoor a model, and LoRA adapters make it easy to hide.
How data poisoning attacks corrupt LLM behavior during tr...
A single expired domain and $60 can poison a training set. Here's how data poisoning attacks corrupt LLM behavior — and how Safeguard verifies training data before it ships.
AI Tool Confused-Deputy: A Deep Dive
The confused deputy problem takes on new and subtle forms when AI agents invoke tools on behalf of users. A technical deep dive with concrete mitigations.
Understanding model poisoning and backdoored model weights
A poisoned model looks like any other checkpoint file. Here's how model poisoning attacks work, real incidents on Hugging Face, and how detection and provenance checks catch them.
What an AI Bill of Materials is and why enterprises need one
An AI bill of materials (AIBOM) inventories the models, data, and dependencies behind an AI system. Here's what it is and why enterprises need one.
Risks of downloading malicious pretrained models from pub...
Real incidents show malicious Hugging Face models evading scanners with pickle exploits and reverse shells. Here's what teams need to know before the next pull.
How slopsquatting exploits AI-hallucinated package names
Slopsquatting attacks turn AI-hallucinated package names into real supply chain threats. Here's how it works, the numbers behind it, and how Safeguard stops it.
Security risks introduced by AI coding assistants and gen...
AI coding assistants now write huge shares of production code. Real 2025 incidents show hallucinated packages, leaked secrets, and vulnerable defaults ship with it.
Using confidential computing to protect LLM inference and...
How hardware-based secure enclaves keep LLM prompts and weights encrypted even during active inference, and why confidential AI inference is reshaping AI compliance in 2026.
What AI red teaming is and how to run a structured exercise
A practical guide to AI red teaming: how to plan, run, and report a structured LLM red team exercise using a repeatable adversarial testing methodology.
Comparing leading LLM red teaming and automated testing t...
A practical comparison of leading LLM red teaming tools -- PyRIT, Garak, Giskard, Promptfoo, Lakera Red, and Mindgard -- with real strengths, limits, and evaluation criteria.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.