Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Sweden's data protection authority fined HR system supplier Miljödata SEK 1.8 million over a 2025 breach affecting 2.2 million people, citing weak checks on new software and no real-time monitoring.
What RFC 9116 requires, what the EU Cyber Resilience Act actually says about a vulnerability contact, a security.txt you can copy, and a short checker you can run in CI so the file never goes stale.
Which wireless products fall under the EU Radio Equipment Directive cybersecurity rules, how EN 18031 and its restricted citation work, and how the 2026 repeal hands them to the Cyber Resilience Act on 11 December 2027.
From 9 December 2026, software sold or supplied in the EU is a "product" for strict liability. If a defect in it, including a security vulnerability, causes injury, damages someone's property or destroys their data, the injured person can claim compensation from the software's maker without proving fault.
CISA's BOD 26-04 replaced the familiar 21-day KEV deadline with a 16-row table: 3, 14 or 60 days, plus forensic triage in the worst cases. What it requires, the 7 December 2026 deadline, and a script that looks up the deadline for any CVE.
Since 4 March 2026, consumer smart devices made for Australia must meet a mandatory security standard: no shared default passwords, a published way to report security issues, and a published security support period with an end date. What it covers, how it's enforced, and how to check your pages.
The UK's Cyber Security and Resilience Bill reaches Lords Report stage on 26 October. It brings managed service providers and large data centres under NIS, lets regulators designate critical suppliers, and adds 24-hour incident notification.
No product can carry the U.S. Cyber Trust Mark yet. Where the FCC's IoT label stands, what the rules commit you to, and what the draft standard tests.
Cyber Essentials v3.3 and Danzell cover every assessment from late October 2026: the cloud MFA auto-fail, 14-day patching and supported software.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
