Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (1021)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1718)Supply Chain (1423)Supply Chain Security (1021)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Product (504)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Supply Chain Security

RNBP Cyberattack: Portugal's Firefighter Register and 60,000 Records

ANEPC confirmed a cyberattack on RNBP, Portugal's firefighter register, with ID, tax, health and blood group data possibly copied. What is known and what to do.

Oct 25, 202634 min read
Supply Chain Security

Apache Traffic Server Fixes 15 CVEs: magick Plugin CVE-2026-111813

Apache Traffic Server 9.2.16, 10.1.5 and 10.2.1 fix 15 CVEs, four rated CVSS 10. None are exploited or in KEV. Upgrade and check plugin.config now.

Oct 25, 202635 min read
Supply Chain Security

KMIP Explained: TTLV, Objects, Operations and How to Secure It

KMIP is the OASIS protocol that storage arrays and databases use to ask a key server to create, fetch, rotate and destroy keys over TLS on port 5696.

Oct 25, 202636 min read
Supply Chain Security

Meshtastic Explained: LoRa Mesh, Channels, Encryption and MQTT

Meshtastic is open source LoRa mesh messaging with no gateways. How channels, AES keys, MQTT bridging and roles work, and how to lock down a node.

Oct 25, 202635 min read
Supply Chain Security

EST and SCEP Explained: Device Certificate Enrollment and Security

EST (RFC 7030) and SCEP (RFC 8894) let devices without DNS names get certificates. How each works, where CMP and ACME fit, and how to lock them down.

Oct 25, 202640 min read
Supply Chain Security

TrueNAS Release History: FreeNAS, CORE, SCALE and Community Edition

TrueNAS 25.10.7 is the current General release and 27 is at RC.1. Every TrueNAS line from FreeNAS to Community Edition, with bases, apps and support.

Oct 25, 202638 min read
Supply Chain Security

Chrome and Chromium Release History: Channels, Cadence and Security

Chrome launched in 2008, moved to six week, four week and now two week milestones, and added sandboxing, site isolation and HTTPS defaults along the way.

Oct 25, 202639 min read
Supply Chain Security

OpenSSH Release History 1999 to 10.x: Security Changes by Version

OpenSSH began as an OpenBSD fork in 1999 and reached 10.6 in October 2026. Every major version, its date and the security defaults it changed.

Oct 25, 202638 min read
Supply Chain Security

Antimony Explained: Sources, Uses, Solar Glass, Chips and Export Controls

Antimony comes from stibnite mined in China, Russia and Tajikistan, feeds flame retardants, batteries, glass and chips, and faces China export licences.

Oct 25, 202639 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.