Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Agent Skills are folders with a SKILL.md file that agents load on demand. How the format works, why it saves context, and how to vet a third-party skill.
MCP elicitation lets a server pause a tool call to ask the user for input through a form or a URL. How it works on the wire and how to secure it.
IEC 81001-5-1:2021 sets the security activities for the health software life cycle. See its structure, its SBOM duties and how it maps to FDA rules.
Cisco fixed a 9.8 root RCE in clustered Expressway, CVE-2026-76466, plus 16 grouped Expressway and UC CVEs on 21 Oct. Upgrade to X15.5.20 and 15SU5.
System Management Mode is the x86 firmware mode an SMI enters. See how SMRAM is locked, what SMI handlers do and how to check SMM with fwupd and CHIPSEC.
CVE-2026-114583 lets a crafted tar escape tarfile's 'tar' filter. The fix is merged in CPython git but no Python release ships it yet. What to do now.
Baseband firmware is the separate modem OS that runs a phone's 2G to 5G radio. How it talks to Android and iOS, what it exposes and how it is patched.
An e-reader pairs a bistable e-paper panel with a low power SoC, embedded Linux or Android firmware and EPUB software. How each layer is built and secured.
A robot vacuum is motors, sensors, a lidar or camera, a Linux SoC and a cloud app. How it is built, how SLAM maps your home, and where that map goes.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
