Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Apple's 14 Sept macOS releases fix 210, 153 and 154 CVEs. Gatekeeper and archive bugs reach every supported Mac; Terminal, TCC and Xcode fixes are 27-only.
USN-8737-1 and 8737-2 fixed six glibc bugs on Ubuntu 22.04, 24.04 and 26.04. Most need an unusual call path, but every container built on those bases carries the old libc6 until rebuilt.
Sudo through 1.9.17p2 does not apply intercept policy checks to execveat in ptrace-based intercept mode. Ubuntu shipped fixes on 22 Sept 2026.
Ubuntu shipped GLib fixes on 21 Sept 2026 for nine CVEs, including a GDBus DoS and a DBUS_COOKIE_SHA1 path traversal. Here is who needs to care.
Debian's 16 Oct 2026 expat update rolls up fixes from Expat 2.8.4, 2.8.5 and 2.9.0. Expat hides inside Python, Git, Apache and more, so inventory it.
CVE-2026-73281 let a forwarded ssh-agent connection do local-only operations like adding tokens or using keys. Ubuntu shipped fixes on 3 Sept 2026.
NVD published 57 RabbitMQ server CVEs between 23 September and 14 October 2026. Here is which ones need no login, which listener they hit, and what to upgrade to.
Apache Airflow disclosed a run of login and session flaws in the FAB and Keycloak providers in September 2026, plus two Keycloak fixes on 15 October. Here is who is reachable.
Four Airflow provider advisories from 16 September to 15 October 2026 turn connection settings into code execution, token theft and credential leaks. Check which connections you run.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
