Research
How many CVEs are in CISA KEV, and what do they share?
The KEV catalog held 1,748 CVEs on 16 October 2026. Over half date from 2021 or earlier. See the vendor, weakness and age patterns and how to use them.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedResearch
What the 1,748 CVEs in CISA's KEV list have in common
CISA's KEV catalog held 1,748 exploited vulnerabilities on 16 October 2026. We counted vendors, years and weakness types so you can prioritise patching.
Oct 18, 20264 min read
Research
Chemical plants: what should defenders inspect first?
At a chemical facility, start with what connects the plant to the outside, then what runs the process, then the software inside it. A calm order of work.
Oct 18, 20264 min read
Research
Car factory cybersecurity: ask your integrators these questions first
Car plants run on integrators, suppliers and vendor remote support. Start by asking who can connect, what software they ship and how you verify it.
Oct 18, 20264 min read
Research
Car factories: how software supply chain risk reaches physical safety
In a car factory, a flawed software component can affect robots and vehicles. See which standards apply and how to trace suppliers, firmware and updates.
Oct 18, 20264 min read
Research
Autonomous vehicles: software supply chain risk as a safety risk
Vehicle regulation asks manufacturers to show they manage supplier cybersecurity risk. What UN Regulation 155 says and what it means for dependencies.
Oct 18, 20264 min read
Research
No-Fix Advisories Let Newer Versions Scan Clean: 2026 Data
534 of 569 no-fix advisories from 2026 use a version ceiling, and scanners treat anything above it as clean. For 54% of those we could check, a newer stable release already exists. Data, method and a checker.
Oct 18, 202612 min read
Research
31% of 2026 GitHub Repository Advisories Weren't in the Advisory Database: What Scanners Miss
We checked 2,486 GitHub repository advisories from 2026 against OSV. 30.7% weren't there, mostly recent ones. The data, the backlog, and a checker.
Oct 18, 20269 min read
Research
GitHub Withdrew 517 Duplicate Advisories in 2026: Where They Linger and How to Clean Up
GitHub withdrew 517 Go, npm and PyPI advisories in 2026, nearly all duplicates live for two weeks. Where they linger in your findings and a cleanup script.
Oct 18, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.