Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
What is publicly known about the March 2023 Euler Finance attack: roughly 197 million dollars taken, a flash loan technique, and most funds later returned.
The EU's new Product Liability Directive treats software as a product and counts vulnerabilities and missing updates as possible defects. Key points.
The US GAO found four weaknesses behind the Equifax breach: identification, detection, segmentation and data governance. What each means for your team.
A Stanford user study found people who engaged more with their prompts wrote fewer vulnerabilities. What that suggests, and what it does not prove.
Remote ID lets a flying drone broadcast its identity and location. See what is sent, the US dates, the EU equivalent and what it means for privacy.
The five DORA delivery metrics, what each tells you after you add AI assistants, how to read them together, and the misuse patterns DORA warns about.
How the ESAs designate critical ICT third-party providers under DORA Article 31, the criteria, the first list of November 2025, and what changes.
The joint guidance on communications infrastructure says it may apply to on-premises enterprise gear. Here is what to adopt first if you are not a carrier.
Two well known studies found vulnerable AI suggestions and overconfident users. What they measured, what they did not, and how to read them in 2026.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
