Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Ruby 4.0.9, 3.4.12 and 3.3.13 fix the Onigmo regex bugs behind four GitLab RCEs. Any Ruby app compiling untrusted patterns should upgrade now.
OpenEoX (OASIS) and CLE (ECMA-428) are machine-readable formats for end of support and end of life dates. Here is what each covers and how to use them.
AP2 lets AI agents pay with signed mandates: open and closed checkout and payment mandates as SD-JWT credentials. How it works, its flows and its risks.
PV = nRT ties a gas's pressure, volume, amount and absolute temperature together. Where it came from, when it fails, and worked examples with numbers.
TACACS+ (RFC 8907) is the AAA protocol for logging in to routers and switches. How sessions, MD5 obfuscation and RFC 9887 TLS 1.3 on port 300 work.
A compromised login let someone copy California student files from an ETS SFTP site for four months. What was taken, what to do, and how to harden SFTP.
How encrypted messengers work: X3DH, PQXDH and the Double Ratchet for chats, MLS for groups, what metadata still leaks, and how to verify and lock down.
Turn a two or four port mini PC into a default deny home firewall with VLANs, IPv6, an open source IDS, filtered encrypted DNS, updates and backups.
CPU microcode updates patch a shipped processor at every boot. Learn how they load, how Intel and AMD sign them, and how to check your revision.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
