trends
Safeguard articles tagged "trends" — guides, analysis, and best practices for software supply chain and application security.
49 articles
The 2024 End-of-Year Vulnerability Disclosure Report
A look back at vulnerability disclosure in 2024: counts, severity distribution, time-to-patch, and the handful of incidents that shifted practice. Numbers, not narrative.
Container Image Supply Chain Incidents 2026
Container image supply chain incidents have grown in frequency and impact. We analyze the 2026 patterns, the registry tradecraft, and what defenders should change.
Vector Database Poisoning Trend Watch
Vector databases are now central infrastructure for retrieval-augmented AI. The 2026 attack trend targets the index itself, not the model — and most defenders are not watching the right layer.
SEC Cyber Disclosure Rules: Year Two
A senior engineer's view of the second-year impact of SEC cybersecurity disclosure rules, what filings actually look like, and where supply chain risk fits in.
Fine-Tune Backdoors: The Quiet Threat
Fine-tuning a model on an attacker-controlled dataset can implant behaviour that only activates under specific conditions. The threat is quiet because detection is hard.
Code Signing Key Theft Trend Watch
Code signing key theft has surged across 2025 and 2026. We trace the recurring incident patterns, the operator tradecraft, and the structural defenses that work.
AI-BOM Becoming Mandatory: Regulatory Trend
AI bills of materials moved from voluntary best practice to regulatory requirement in 2026. Multiple jurisdictions now require disclosure of model, data, and component lineage for high-impact AI systems.
FTC Data Broker Rule And Supply Chain Overlap
A senior engineer's view of how FTC data broker rulemaking through 2025 and 2026 intersects with software supply chain expectations for organizations handling personal data.
Ransomware Via Software Supply Chain In 2026
Ransomware operators increasingly enter victims through software supply chain pathways. We analyze the 2026 patterns, the affiliate dynamics, and what defenders should do.
Frontier Model Pricing Pressure: Architectural Response
Frontier model pricing is rising even as cheaper alternatives proliferate. The 2026 architectural response is multi-tier model routing — and the security implications are non-trivial.
DORA Financial Sector Supply Chain Controls
A senior engineer's view of how DORA's ICT third-party risk management requirements are reshaping software supply chain controls across European financial services.
RAG Poisoning In The Wild: Trend Watch
Retrieval-augmented generation was the 2024 success story. 2026 is when RAG poisoning moved from research to production incidents.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.