Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
361 of 1,748 KEV entries carry the ransomware flag. See how it splits by year, vendor and weakness, and why recent years look lower than earlier ones.
Fourteen firewall, VPN and gateway vendors hold 277 of 1,748 KEV entries. Their share of yearly additions rose from 14% in 2022 to 20% in 2026.
We counted 1,748 KEV entries. Since 2023, about 6 in 10 were added in the same year as their CVE ID, but roughly 1 in 10 were five or more years old.
175 of 1,748 KEV entries list no weakness code, mostly Microsoft and Oracle. What the gap does to weakness analysis and how to handle it safely.
Open source is widely used and can be sound, but the label describes licensing, not a security review. How leaders should think about trust and upkeep.
Supply chain security standards and guidance have moved fast. See what changed recently and how to judge whether an older report still applies.
Can analyst placement be bought? Public policies do not settle it. Here is what they say and the questions buyers can ask before relying on a chart.
When one firm protects itself, others may feel safer and spend less. The sprinkler and vaccine logic behind interdependent risk and how to respond.
ESET and CERT-UA found Industroyer2 aimed at substations in Ukraine in April 2022. What it targeted, what was stopped, and what remains unknown.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
