Resources Archive - Page 7 of 56 - Safe Security
SAFE Named a Leader in the 2026 Liminal Index for Cyber TPRM. Get the Report →
Book a demo

Resource Library

News SAFE Security named a Leader in IDC MarketScape for Third Party Risk Management (TPRM) Software Safe Security has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Software 2026 Vendor Assessment. The IDC MarketScape Report evaluated vendors across 20 weighted… SAFE Safe Security Sep 23, 2026 3 min read
Analyst Reports SAFE Named a Leader in the IDC MarketScape Sep 22, 2026 2 min read
Templates Vendor Continuous Monitoring Checklist Rahul Tyagi Safe Security Sep 22, 2026 2 min read
Templates Vendor Offboarding and Exit Checklist Rahul Tyagi Safe Security Sep 22, 2026 1 min read
Threat Research From Authentication Bypass to Cloud Pivot: Exploitation Is Moving Beyond the Initial Foothold By SAFE Threat Research Team An authentication bypass in Cisco ISE can end in root access. A pre-auth flaw in Marimo can expose cloud credentials and open a… SAFE Safe Security Sep 22, 2026 8 min read
Trends OpenAI Model Misalignment: Why Agentic AI Needs Guardrails and Measurable Trust OpenAI recently introduced a new framework for tracking and disclosing model misalignment, together with six reports describing unexpected or concerning behavior observed during model training and evaluation. The… Rahul Tyagi Safe Security Sep 21, 2026 8 min read
Events SAFE at Gartner SRM London 2026: Put TPRM and CTEM Into Action Cyber risk doesn’t wait for your team to clear its backlog. Vendor evidence needs review. Exposures need context, remediation needs owners, and someone has to verify that the… Sweta Bhattacharya Safe Security Sep 21, 2026 5 min read
Threat Research CVE-2026-42647 | JoomSport WordPress Plugin Unauthenticated Time-Based Blind SQL Injection via sortf Parameter – Full Database Extraction CVSS Score: 9.3 CRITICAL | Affected: JoomSport <= 5.7.7 | Fixed: JoomSport 5.7.8+| CWE: CWE-89 – SQL Injection (ORDER BY)| CISA KEV: Not Listed 1. Introduction This document… SAFE Safe Security Sep 19, 2026 11 min read
Threat Research CVE-2026-20253 | Splunk Enterprise 10.x – Unauthenticated Arbitrary File Write to RCE via PostgreSQL Sidecar Recovery Endpoint 1. Introduction This document illustrates a Missing Authentication for a Critical Function vulnerability (CWE-306) in Splunk Enterprise, the flagship on-premises observability and Security Information and Event Management (SIEM)… SAFE Safe Security Sep 18, 2026 12 min read
Threat Research CVE Volume Surges This Week, But Exploitation Stays Focused on High-Value Enterprise Systems By SAFE Threat Research Team This week’s vulnerability landscape is noisy, but attacker activity is not. Real-world exploitation is clustering around technologies that control access, software delivery, and… SAFE Safe Security Sep 16, 2026 11 min read
CTEM Shift Three : The AI Security Workflow That Matters Ends With Verification Part 4 of a four-part series on what the defender’s window requires at enterprise scale. Once exposures are understood and prioritized, the final shift is execution: using AI… Rahul Tyagi Safe Security Sep 16, 2026 7 min read
Threat Research CVE-2026-53576 | Kestra ≤ 1.3.20 – Unauthenticated Remote Code Execution via REST API Authentication Filter Bypass Introduction This document illustrates an unauthenticated Remote Code Execution (RCE) vulnerability in Kestra, the open-source event-driven workflow orchestration platform distributed as both a self-hosted OSS package and a… SAFE Safe Security Sep 13, 2026 8 min read