Vulnerability Analysis
VMware ESXi CVE-2024-37085 Auth Bypass by Ransomware
CVE-2024-37085 abuses ESXi's AD domain join to grant admin via a specially named group. Exploitation by Akira and Black Basta, detection, and fix.
Feb 11, 20268 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
How to set up a CI/CD pipeline security gate
A practical, step-by-step guide to building a CI/CD pipeline security gate that scans, enforces vulnerability thresholds, and blocks risky builds without slowing developers down.
Feb 11, 20268 min read
AI Security
How to Choose a Container Scanning Tool That Actually Helps
A practitioner's guide to picking a container scanning tool: what it should detect, where it fits in the pipeline, and how to avoid drowning in false positives.
Feb 10, 20266 min read
AI Security
Benchmark Contamination Concerns In Security Evals
When the test set is in the training set, the benchmark is broken. Security eval contamination is widespread and the mitigations are specific.
Feb 10, 20262 min read
AI Security
Griffin AI vs Claude Agent Skills for Security
Anthropic's Claude Agent Skills let you package tools and context for Claude. Here's how that primitive compares to Griffin's security-specific workflow scaffolding.
Feb 10, 20267 min read
AI Security
Griffin AI vs Mythos: The Security Platform Comparison
A senior engineer's side-by-side look at Griffin AI and Mythos — why engine-grounded reasoning beats pure-LLM security intuition when the audit clock starts.
Feb 10, 20266 min read
Standards
ISO/IEC 42001: AI Management Systems Reach Adoption Critical Mass
ISO/IEC 42001:2023 went from new-standard status to enterprise compliance benchmark in 2025, with major SaaS vendors certifying and the EU AI Act referencing it as a harmonized pathway.
Feb 10, 20267 min read
Regulation
UK Cyber Security and Resilience Bill: What Changed November 2025
The UK government published the draft Cyber Security and Resilience Bill on 12 November 2025, bringing over 900 managed service providers and data centres above 1MW into NIS scope.
Feb 10, 20267 min read
AI Security
AI Security Solutions: A Buyer's Guide for 2026
AI security solutions now span two very different categories — securing AI systems and using AI to secure everything else — and buyers who conflate them end up with the wrong tool.
Feb 10, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.