Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (12009)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3307)Developer Tools (2961)Compliance (2830)AI Security (1721)Supply Chain (1423)Supply Chain Security (1026)Industry Analysis (1005)Research (585)Security (532)Product (512)DevSecOps (511)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (287)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (74)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (36)Engineering (29)Licensing (26)Ransomware (24)Tutorials (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Case Studies (16)Tool Reviews (16)Vulnerability Response (16)Risk Management (16)Agent Security (16)Threat Research (16)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Cryptography (15)Incident Response (15)Industry Events (14)Security Strategy (13)Frameworks (12)Buyer Guides (11)Web Security (11)Data Breach (11)Dependency Security (11)Career (10)Security News (10)Culture (9)Enterprise (9)Company (9)Architecture (8)Standards (8)Vulnerability Research (8)Strategy (8)Secure Development (7)Industry Insights (7)Industry Trends (7)Zero-Day Exploits (7)Network Security (7)How-To Guide (7)Dependency Management (7)Vendor Comparison (6)Security Operations (6)Organizational Security (6)Developer Security (6)Industry (6)Dev Practices (6)Code Security (5)Breach Analysis (5)Cryptocurrency Security (4)Product Launch (4)Mobile Security (4)Policy (4)Offensive Security (4)Tool Comparisons (4)Healthcare Security (3)Governance (3)Social Engineering (3)Hardware Security (3)Build Security (3)Policy & Compliance (3)API Security (3)Regional Security (3)Startup Security (3)Analysis (3)SBOM Standards (2)DeFi Security (2)Industry News (2)Security Architecture (2)Security Management (2)SBOM and Compliance (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Tools & Platforms (1)Tools & Techniques (1)Events (1)Architecture Security (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Nation-State Threats (1)Language Security (1)Perspectives (1)Privacy & Security (1)Threat Analysis (1)Runtime Security (1)Emerging Threats (1)Threat Modeling (1)Healthcare (1)Data Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)PKI Security (1)Privacy (1)Product Update (1)Technical (1)Lifecycle Management (1)Credential Attacks (1)Business Continuity (1)

Articles

RSS feed
Vulnerability Analysis

CVE-2026-106218: JetBrains TeamCity Kotlin DSL Sandbox Escape

CVE-2026-106218 is a Kotlin DSL sandbox escape leading to RCE on TeamCity before 2026.1.3 and 2025.11.7. Upgrade TeamCity and review who can edit build configs.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-1062: Server-Side Request Forgery in xiweicheng TMS

CVE-2026-1062 is an SSRF in the HtmlUtil Summary function of xiweicheng TMS up to 2.28.0. No fix is named in the record, so restrict outbound traffic and check the project.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-106195: Chrome on Mac Chromoting Authorization Flaw

CVE-2026-106195 is an incorrect authorization flaw in Chromoting in Chrome on Mac before 155.0.8059.39. Update Chrome and relaunch it. Chromium rates it Low.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-10611: Critical OTP Bypass in MISP with LDAP Mixed Auth

CVE-2026-10611 lets users skip OTP in MISP when LdapAuth.mixedAuth and Security.require_otp are both on. Update MISP to a build with the fix and review settings.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-1059: SQL Injection in FeMiner Warehouse Management System

CVE-2026-1059 is a SQL injection in the login check of FeMiner WMS. The vendor has not responded and no fixed version is known, so restrict access or retire it.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-105863: Critical Auth Token Flaw in Payload CMS

CVE-2026-105863 lets a Payload field mapped to a reserved auth claim name put unintended values in login tokens. Upgrade Payload to 3.90.0 or later.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-105848: Payload Stripe Plugin Proxy Allows Unintended Calls

CVE-2026-105848 lets authenticated users perform unintended Stripe operations via the Payload Stripe REST proxy. Upgrade @payloadcms/plugin-stripe to 3.90.0.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-10560: Missing Authentication in Langflow Build Events

CVE-2026-10560 exposes Langflow build events and job cancellation without a login in 1.0.0 through 1.9.6. Upgrade to Langflow 1.10.0 and review exposure.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-10543: IBM Db2 Privilege Escalation via Crafted Query

CVE-2026-10543 is a high severity privilege escalation in IBM Db2 11.5 and 12.1. Apply the IBM security update and read its notes on changed behavior.

Oct 18, 20263 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

We email you a link to confirm, and only then add you to the list. Unsubscribe in one click. Privacy

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.