Industry Analysis
CISO burnout: how security leaders build a sustainable role
CISO burnout often comes from unclear authority, constant alerts and personal accountability. These practical steps make the role more sustainable.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedIndustry Analysis
What the CISA minimum requirements for VEX say, and do not say
A plain summary of CISA's April 2023 minimum requirements for VEX: required fields, statuses, signing, and the limits CISA states about its own document.
Oct 18, 20263 min read
Industry Analysis
CISA advisory AA22-103A: tools built to attack PLCs and ICS
A 2022 joint advisory warned of custom tools that attack Schneider and OMRON PLCs and OPC UA servers. The capabilities and the defences it lists.
Oct 18, 20263 min read
Industry Analysis
Chinchilla scaling explained: model size versus training data
The Chinchilla result says model size and training tokens should scale together. Why it matters for small models, and what it does not tell you.
Oct 18, 20263 min read
Industry Analysis
DOJ's good faith security research policy under the CFAA, explained
DOJ's May 2022 policy says it will not charge good faith security research under the CFAA. What it covers, what it does not, and what it means for you.
Oct 18, 20263 min read
Industry Analysis
Capture the flag myths vs facts for engineering leaders
Six common myths about CTF events for developers, from needing expert hackers to wasting a day, checked against how internal events actually run.
Oct 18, 20263 min read
Industry Analysis
Can hackers take over a car? Myths and facts from public cases
Can a car really be hacked? Public cases show yes, in specific ways, but not every claim holds. Myths and facts from named, sourced incidents.
Oct 18, 20264 min read
Industry Analysis
Can a cyberattack shut down the power grid? What is documented
Yes, a cyberattack has cut power before, in Ukraine in 2015. Here is what the record shows, what it does not show, and what limits the damage.
Oct 18, 20264 min read
Industry Analysis
The Bybit theft of February 2025: what is confirmed and what is not
The FBI blamed North Korea for the 1.5 billion dollar Bybit theft. What investigators confirmed about the Safe Wallet compromise, and what is unclear.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.