Safeguard
Tag

kev

Safeguard articles tagged "kev" — guides, analysis, and best practices for software supply chain and application security.

21 articles

Industry Analysis

State of CVE Disclosure and KEV in 2026

A senior-analyst view of CVE disclosure, KEV catalog growth, and the operational patterns that keep pace with them in 2026.

Mar 18, 20269 min read
Vulnerability Management

CVE Triage Is Broken. Here's a Better Workflow.

Most enterprise CVE queues are noise. KEV plus EPSS plus reachability plus policy-as-code cuts the real actionable list to a manageable few percent.

Mar 12, 20267 min read
Vulnerability Management

Vulnerability Intelligence Platform Buyer Guide 2026

A senior-engineer's buyer guide for vulnerability intelligence platforms in 2026: what to evaluate, how to test, and where most procurement processes go wrong.

Mar 11, 20265 min read
Security Concepts

CVE Vulnerabilities Explained: How the CVE System Works

What a CVE vulnerability actually is, who assigns the IDs, how CVSS scoring and the KEV catalog fit in, and why a CVE number is a label, not a verdict.

Mar 10, 20266 min read
Vulnerability Management

KEV, EPSS, CVSS: Which Signal Should Drive Patching?

CVSS measures severity, EPSS predicts exploitation, KEV confirms active exploitation. Each answers a different question, and patching policy should use all three.

Feb 20, 20267 min read
Industry Analysis

State of Vulnerability Management 2026 Report

Where vulnerability management actually stands in 2026: KEV-driven prioritization, reachability, SLAs that hold, and the tools teams are consolidating onto.

Feb 4, 20268 min read
Vulnerability Analysis

CISA KEV Catalog: One Year Analysis of Known Exploited Vulnerabilities

After one year, the CISA KEV catalog has reshaped how organizations prioritize patching. Here's what the data tells us about real-world exploitation.

Jan 26, 20266 min read
Vulnerability Analysis

GitLab ExifTool RCE (CVE-2021-22205)

CVE-2021-22205 let attackers RCE self-managed GitLab via a malicious ExifTool-parsed upload — no auth required. Here's the timeline and fix.

Jan 11, 20268 min read
Compliance & Regulations

CISA Known Exploited Vulnerabilities Catalog Launched

CISA's KEV catalog changes vulnerability management from theoretical risk to confirmed exploitation. Here's what it means and how to use it for prioritization.

Jan 5, 20265 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

kev (Page 2) — Safeguard Blog