Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A2A lets one AI agent hand a task to another over HTTPS or gRPC; MCP connects an agent to its tools. How A2A tasks, Agent Cards and streams work on the wire.
ARP and IPv6 Neighbor Discovery map IP addresses to MAC addresses on a LAN. How both work, why they trust any reply, and the defences that actually help.
MQTT is a publish/subscribe protocol where clients talk only to a broker over TCP. How its 15 packets, QoS levels and sessions work, and how to secure it.
HTTP/2 (RFC 9113) carries HTTP as binary frames on parallel streams over one connection, with HPACK header compression. How it works and where it breaks.
A 'Skynet' agent hijacks exposed OpenAI-compatible endpoints and MCP servers to run attacks on the owner's bill. Published IOCs, checks and fixes inside.
OpenVPN runs a TLS control channel and a separate encrypted data channel over one UDP or TCP connection. How both work, what changed in 2.6, and hardening.
SMB is Windows' file sharing protocol on TCP 445. How SMB2 and SMB3 dialects negotiate, sign and encrypt, what SMB over QUIC adds, and how to check yours.
WireGuard is a layer 3 VPN over UDP with a Noise_IKpsk2 handshake. How its messages, cryptokey routing, cookies, timers and roaming work, and how to audit.
Quest Diagnostics found unauthorized access to its Quanum LSM lab ordering portal on 21 Oct 2026. What is confirmed, the HIPAA clocks, and what to do now.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
