AI Security
Deepfakes and Social Engineering: The Human Layer of Supply Chain Attacks
AI-generated deepfakes are making social engineering attacks against software supply chains more convincing and harder to detect.
May 20, 20245 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
AI Model Poisoning: Detection Techniques for the Software Supply Chain
Poisoned AI models are a supply chain threat that traditional security tools can't detect. Here are the emerging techniques for identifying compromised models.
Apr 8, 20246 min read
AI Security
AI Code Review for Security: How Effective Is It Really?
AI-powered code review tools promise to catch vulnerabilities faster than humans. We tested the claims against reality.
Jan 5, 20246 min read
AI Security
Autonomous Security Remediation: The Promise and Peril of Self-Healing Software
Automated vulnerability patching sounds ideal until you consider what happens when the automation gets it wrong. Here's a realistic look at autonomous remediation.
Dec 15, 20236 min read
AI Security
AI Model Supply Chain Risks: Hugging Face and the New Attack Surface
As organizations download pre-trained models from Hugging Face and other model hubs, the AI supply chain introduces risks that traditional software security tools don't address.
Nov 20, 20235 min read
AI Security
The LLM Supply Chain: Risks Hiding in Foundation Models
Large language models have their own supply chains: training data, fine-tuning datasets, model weights, and serving infrastructure. Each layer introduces risk.
Nov 8, 20235 min read
AI Security
OWASP Top 10 for LLM Applications: A First Look
OWASP published its first Top 10 for LLM Applications on August 1, 2023. Here is what it covers, where it overreaches, and how to use it on real systems.
Sep 28, 20235 min read
AI Security
Securing LLM Applications: The OWASP Top 10 for Large Language Models
OWASP released its Top 10 for LLM Applications in August 2023, providing the first standardized framework for understanding and mitigating risks in AI-powered software.
Sep 25, 20235 min read
AI Security
AI Hallucinations Meet Package Confusion: A New Class of Supply Chain Attack
When LLMs hallucinate package names that don't exist, attackers can register them. This supply chain attack vector is already being exploited in the wild.
Sep 20, 20235 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.