AI Security
AI-BOM and ML-BOM: The State of Standards in 2026
Where AI-BOM and ML-BOM specifications stand in 2026, which formats have real adoption, and what to capture today even if the standards are still in motion.
Mar 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedContainer Security
Container Runtime Comparison: A 2026 Buyer's Guide
A practical container runtime comparison for 2026 buyers: containerd, CRI-O, gVisor, Kata, and Youki measured against real production workloads.
Mar 18, 20265 min read
AI Security
Jailbreaking AI: How LLM Jailbreaks Work and How to Defend Against Them
Jailbreaking AI means getting a model to bypass its own safety guardrails. This guide explains how jailbreaks work conceptually, how they differ from prompt injection, and how to build layered defenses.
Mar 18, 20266 min read
Incident Analysis
Blue Yonder Termite Ransomware: SaaS Supply-Chain Outage in Retail
In November 2024 the Termite ransomware group hit Blue Yonder, taking workforce-management and logistics SaaS offline for Starbucks, Sainsbury's, and Morrisons. We unpack the SaaS supply-chain blast radius.
Mar 18, 20267 min read
AI Security
GenAI Code Assistants and Package Hallucination: 2026 Update
LLM-suggested package names that do not exist are a registered attack vector in 2026. Here is where hallucination rates sit today and how to contain them.
Mar 18, 20267 min read
Concepts
What Is a Security Champion?
A security champion is a developer who advocates for security inside their team, bridging engineering and the security function. Learn the role, how programs work, and why they scale culture.
Mar 18, 20266 min read
Container Security
What is Kubernetes Pod Security
Pod Security Standards replaced PodSecurityPolicy in Kubernetes 1.25. Here's what Kubernetes pod security means and how to enforce it in production.
Mar 18, 20266 min read
Vulnerability Analysis
Fortinet CVE-2024-21762 Deep Dive: Why SSL-VPN Keeps Producing Critical CVEs
The February 2024 FortiOS SSL-VPN remote code execution vulnerability continues a pattern of high-impact CVEs in edge appliances. A technical retrospective and structural analysis.
Mar 18, 20265 min read
Cloud Security
Cloud-Native Security Platforms: What to Look For
A cloud native security platform needs to cover code, containers, and cloud configuration as one connected surface — here's what separates a real platform from a bundle of point tools.
Mar 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.