Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A March hack of the P3 tip platform exposed 1.5M+ Canadian Crime Stoppers tips. What happened, and how to vet vendors that hold anonymous reports.
CVE-2026-113380 let a Signal caller flood RingRTC so a hang-up never ended the call. Fixed in RingRTC 2.72.0; update Signal on every device now.
No regulator names the HBOM yet, but FDA, UN R155 and R156, DFARS, FAR 889, the FCC Covered List and the EU CRA ask questions only hardware data answers.
FTP sends passwords in cleartext. FTPS adds TLS to FTP's two connections; SFTP is a separate SSH subsystem on port 22. Use SFTP unless FTPS is required.
All 45 Ubuntu releases from 4.10 Warty Warthog to 26.10 Stonking Stingray: codename, release date, kernel and support end, from Canonical's own pages.
IPv4 (RFC 791) uses 32 bit addresses; IPv6 (RFC 8200) uses 128 bit ones, a fixed 40 byte header and extension headers. What that changes for security.
Counterfeit chips enter via brokers, obsolete stock and recycled parts. An HBOM recording source, lot and date code lets you trace and quarantine them.
SMTP (RFC 5321) moves mail between servers in plaintext by default. See how STARTTLS, MTA-STS, DANE, SPF, DKIM and DMARC each fix a different part of it.
RDP and VNC let you see and control a remote desktop. Learn how each works on the wire, where they are weak, and how to lock down NLA, TLS and exposure.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
