Resources Archive - Page 6 of 56 - Safe Security
SAFE Named a Leader in the 2026 Liminal Index for Cyber TPRM. Get the Report →
Book a demo

Resource Library

Threat Research CVE-2026-62201 OpenClaw: Sandbox Exec-Server SSRF and Network Policy Bypass 1. Introduction This article examines a Server-Side Request Forgery (SSRF) and network policy bypass in OpenClaw, a local-first AI assistant platform that supports execution through sandboxed backends. Tracked… SAFE Safe Security Oct 5, 2026 9 min read
Customer Stories From Months to Weeks: How a Manufacturer Cut Vendor Risk Assessments to Less than 2 Weeks For most manufacturing organizations, suppliers and service providers are a growing concern. They host data, connect to internal systems, and keep operations running smoothly. And the risk keeps… Meghan Maneval Safe Security Oct 2, 2026 5 min read
Threat Research CVE-2026-34486 | Apache Tomcat: EncryptInterceptor Bypass to Remote Code Execution 1. Introduction This article examines a Missing Encryption of Sensitive Data vulnerability in Apache Tomcat, a widely deployed open-source Java servlet container. The flaw allows an attacker with… SAFE Safe Security Oct 2, 2026 9 min read
Threat Research This Week’s CVE Priorities: Citrix, Check Point, F5, Cisco, and PeopleSoft Under Active Exploitation By SAFE Threat Research Team This week’s highest-priority vulnerabilities are concentrated across technologies that sit at critical enterprise trust boundaries, including application delivery, remote access, network management, and… SAFE Safe Security Oct 1, 2026 9 min read
Whitepapers No Nonsense Guide to TPRM in 2026 Book Sep 30, 2026 9 min read
Threat Research CVE-2026-49049 | JoomShaper Helix3 (Joomla) – Unauthenticated Arbitrary JSON File Write 1. Introduction This document illustrates an unauthenticated arbitrary file write vulnerability in JoomShaper’s Helix3 template framework for Joomla — a widely adopted front-end framework used by tens of… SAFE Safe Security Sep 30, 2026 8 min read
Threat Research CVE-2026-82329 | JFrog Artifactory Blank-Join-Key Authentication Bypass (Unauthenticated Admin Takeover) 1. Introduction This document illustrates an unauthenticated authentication bypass vulnerability in JFrog Artifactory – a widely deployed universal artifact repository manager used by thousands of enterprises across the… SAFE Safe Security Sep 30, 2026 7 min read
TPRM AI Cybersecurity in 2027: Why TPRM and CTEM Must Move at Machine Speed I want to start with one sentence that I believe every CISO should think about before 2027. You cannot defend a machine speed attack surface with a calendar… Rahul Tyagi Safe Security Sep 29, 2026 16 min read
Templates Vendor Onboarding Security Questionnaire Rahul Tyagi Safe Security Sep 25, 2026 2 min read
Templates Vendor Due Diligence Assessment Checklist Rahul Tyagi Safe Security Sep 25, 2026 2 min read
Templates Vendor Risk Assessment Questionnaire Rahul Tyagi Safe Security Sep 25, 2026 2 min read
Threat Research CVE-2026-60004 | Gitea 1.17–1.27.0 – Pre-Authentication Remote Code Execution via diffpatch Git Hook Injection 1. Introduction This document illustrates a pre-authentication Remote Code Execution (RCE) vulnerability in Gitea, the widely deployed open-source, self-hosted Git service used by development teams, enterprises and internal… SAFE Safe Security Sep 25, 2026 13 min read