Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (1021)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1718)Supply Chain (1423)Supply Chain Security (1021)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Product (504)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Supply Chain Security

NEC Subcontractor Breach: Osaka Metropolitan Ransomware, 77,851 Leaked

An NEC subcontractor breach led to ransomware at Osaka Metropolitan University and a 77,851 person leak at Osaka University. What happened, what to check.

Oct 25, 202634 min read
Supply Chain Security

ASPA Explained: RPKI Route Leak Detection and How to Deploy It

ASPA lets a network sign the list of its transit providers in the RPKI so routers can reject leaked AS paths. How it works, its limits and how to deploy it.

Oct 25, 202639 min read
Supply Chain Security

ASUS Router Flaws CVE-2026-93489 and CVE-2026-75775 Explained

ASUS fixed three High rated flaws in 3.0.0.6_102 router firmware on 23 Oct 2026. No exploitation is reported. Update firmware and lock down admin access.

Oct 25, 202632 min read
Supply Chain Security

Windows VBS Explained: VTL1, Secure Kernel, HVCI and VBS Enclaves

VBS uses the Windows hypervisor to run a secure kernel in VTL1 that the normal kernel cannot touch. Here is how HVCI, Credential Guard and enclaves use it.

Oct 25, 202640 min read
Supply Chain Security

XMPP Explained: RFC 6120, TLS, SASL, OMEMO and Secure Self-Hosting

XMPP is the IETF's federated chat protocol. How streams, TLS, SASL SCRAM, dialback and OMEMO work, what servers still see, and how to self-host safely.

Oct 25, 202641 min read
Supply Chain Security

How a Pacemaker Is Made: Leads, Batteries, Sealing and Firmware

A pacemaker is a lithium cell, a low power circuit and firmware sealed in welded titanium, wired to the heart by coiled leads. How each part is built and tested.

Oct 25, 202639 min read
Supply Chain Security

How RFID Tags Are Made: RAIN Inlays, Chips, EPC Gen2 and Privacy

A UHF RAIN RFID tag is a tiny chip bonded to a printed or etched antenna on plastic film, encoded with an EPC and read by backscatter under the Gen2 standard.

Oct 25, 202639 min read
Supply Chain Security

CentOS 7 After End of Life: Vault, Migration Paths and What to Patch

CentOS 7 reached end of life on 30 June 2024. Its packages sit frozen on vault.centos.org. How to find it, migrate, buy time safely and decide what to patch.

Oct 25, 202641 min read
Supply Chain Security

Debian Governance Explained: Constitution, DPL, Tech Committee and GRs

Debian is run by its developers under a 1998 constitution: an elected leader, a Technical Committee and ranked General Resolutions. Here is how each works.

Oct 25, 202640 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.