Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (38900)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3307)Developer Tools (2961)Compliance (2830)AI Security (1723)Supply Chain (1423)Supply Chain Security (1028)Industry Analysis (1005)Research (585)Security (532)Product (514)DevSecOps (511)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (288)Software Supply Chain (283)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (74)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (36)Engineering (29)Licensing (26)Ransomware (24)Tutorials (24)Kubernetes Security (22)SecOps (22)Guides (22)Vulnerability Guides (20)Regulation (20)Industry Guides (19)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Threat Research (16)Case Studies (16)Tool Reviews (16)Vulnerability Response (16)Risk Management (16)Agent Security (16)Incident Response (15)Security Concepts (15)Identity Security (15)Cryptography (15)Compliance & Frameworks (15)Industry Events (14)Security Strategy (13)Buyer Guides (12)Frameworks (12)Web Security (11)Dependency Security (11)Data Breach (11)Career (10)Security News (10)Enterprise (9)Company (9)Culture (9)Architecture (8)Standards (8)Vulnerability Research (8)Strategy (8)Secure Development (7)Industry Insights (7)Industry Trends (7)Zero-Day Exploits (7)Network Security (7)How-To Guide (7)Dependency Management (7)Vendor Comparison (6)Security Operations (6)Organizational Security (6)Developer Security (6)Industry (6)Dev Practices (6)Code Security (5)Breach Analysis (5)Cryptocurrency Security (4)Product Launch (4)Mobile Security (4)Policy (4)Offensive Security (4)Tool Comparisons (4)Healthcare Security (3)Governance (3)Social Engineering (3)Hardware Security (3)Build Security (3)Policy & Compliance (3)API Security (3)Regional Security (3)Startup Security (3)Analysis (3)SBOM Standards (2)DeFi Security (2)Industry News (2)Security Architecture (2)Security Management (2)SBOM and Compliance (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Tools & Platforms (1)Tools & Techniques (1)Events (1)Architecture Security (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Nation-State Threats (1)Language Security (1)Perspectives (1)Privacy & Security (1)Threat Analysis (1)Runtime Security (1)Emerging Threats (1)Threat Modeling (1)Healthcare (1)Data Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)PKI Security (1)Privacy (1)Product Update (1)Technical (1)Lifecycle Management (1)Credential Attacks (1)Business Continuity (1)

Articles

RSS feed
Vulnerability Analysis

A Second Cisco Firewall Management Center Bug, This One Confirmed for Ransomware

CVE-2026-20131 in Cisco FMC carries CISA's confirmed ransomware flag — the second FMC vulnerability covered in this series, alongside new findings in Email Gateway, ASA/FTD, and Unified CM.

Sep 16, 20264 min read
Vulnerability Analysis

Cisco's Catalyst SD-WAN Line Produced Seven Confirmed-Exploited CVEs in a Year

From a perfect-10 peering authentication bypass to CLI privilege escalation, seven distinct vulnerabilities across Cisco's SD-WAN Controller, Manager, and underlying software were confirmed exploited.

Sep 16, 20264 min read
Vulnerability Analysis

Nine Windows Privilege Escalation Bugs Confirmed Exploited — Why the Quiet Ones Matter Most

Nine local privilege-escalation and access-control vulnerabilities in Windows were confirmed exploited over the past year. None individually dramatic, together they define how far an intrusion spreads.

Sep 16, 20264 min read
Vulnerability Analysis

Microsoft Defender Had Three of Its Own Vulnerabilities Confirmed Exploited

Security software is software first: two local privilege-escalation bugs and a denial-of-service flaw in Microsoft Defender itself were confirmed exploited in the wild.

Sep 16, 20264 min read
Vulnerability Analysis

SharePoint and Exchange Produce Four More Confirmed-Exploited CVEs

Beyond the five-CVE cluster covered earlier, four more SharePoint and Exchange vulnerabilities were confirmed exploited across the year — including a 2023 Exchange bug confirmed nearly three years later.

Sep 16, 20264 min read
Vulnerability Analysis

WSUS and Configuration Manager: When Patch Infrastructure Itself Needs Patching

CVE-2025-59287 in WSUS and CVE-2024-43468 in Configuration Manager both scored CVSS 9.8 — critical bugs in the very tools organizations use to distribute trust across their fleet.

Sep 16, 20264 min read
Vulnerability Analysis

Eleven Microsoft CVEs From 2008 to 2013, All Confirmed Exploited This Past Year

A Windows buffer overflow from 2008, IE bugs from 2010, an Office flaw from 2009 — eleven old Microsoft vulnerabilities entered CISA's KEV catalogue, several on the exact same day.

Sep 16, 20264 min read
Industry Analysis

Gaming Industry Security: When the Player Is Also the Threat Actor

Game security has to assume a meaningful share of paying users will actively try to cheat or reverse-engineer the client — a threat model with no real equivalent in enterprise software.

Sep 16, 20264 min read
Industry Analysis

Construction Security: What's Actually at Risk in a Shared BIM Model

Building information models carry structural, mechanical, and security-system data across an entire project team — a multi-organization access problem the construction industry has under-secured for years.

Sep 16, 20264 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

We email you a link to confirm, and only then add you to the list. Unsubscribe in one click. Privacy

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.