Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Apache CouchDB disclosed six CVEs on 20 Oct 2026, from admin command execution to a prefixed _users read bypass. Upgrade to 3.5.3; no attacks reported.
The Claude Agent SDK runs Claude Code's agent loop inside your app. How the loop, tools, permission modes, hooks and sandbox work, and how to lock it down.
CISA published four HAPI FHIR CVEs on 22 Oct 2026; three have no fix. Block the cross-tenant partition override now with an interceptor and gateway rule.
Treasure Factory says a database access flaw in its pickup and moving case system exposed 746,277 customer emails on 20 Oct. Facts, timeline and checks.
Park24's final Times Car report: 6,628,007 accounts and 1,464,800 encrypted ID images sent out, a ¥5.5bn loss and a rule to delete images after checks.
OmniBOR gives every file a reproducible gitoid and records each build's inputs in manifests. Learn the format, the ADG, SBOM fields, tooling and limits.
AGNTCY is a Linux Foundation project for finding and messaging AI agents. See how OASF, the Agent Directory, SLIM and identity work, and where trust stops.
AT Protocol keeps your Bluesky identity and signed data on a Personal Data Server. Here is how DIDs, repos and relays work, and how to run your own PDS.
A self-hosted mail server is an SMTP MTA, IMAP server, filter and DNS records. Publish SPF, DKIM, DMARC and MTA-STS; relay if your IP is residential.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
