Resources Archive - Page 8 of 56 - Safe Security
SAFE Named a Leader in the 2026 Liminal Index for Cyber TPRM. Get the Report →
Book a demo

Resource Library

CTEM Shift Two: Centralizing Exposure Data Is Not the Same as Understanding It Part 3 of a four-part series on what the defender’s window requires at enterprise scale. Risk-based prioritization only works when the underlying exposure data can be reconciled, contextualized,… Rahul Tyagi Safe Security Sep 12, 2026 6 min read
Threat Research CVE-2026-48313 | Adobe ColdFusion – Unauthenticated Arbitrary File Read via RDS FILEIO Path Traversal Severity: CRITICAL  |  CVSS: 9.3  |  Published: June 30, 2026  |  Advisory: APSB26-68 Introduction This document illustrates an unauthenticated arbitrary file read vulnerability in Adobe ColdFusion – a… SAFE Safe Security Sep 12, 2026 10 min read
Templates Vendor Risk Assessment Checklist SAFE Safe Security Sep 11, 2026 3 min read
Templates LLM Vendor Risk Questionnaire 46 questions across 12 domains for LLM and AI vendors, split into 20 Core and 26 Enhanced. Rahul Tyagi Safe Security Sep 11, 2026 1 min read
Templates SaaS Vendor Security Questionnaire 40 questions across 12 domains, split into 24 Core for a standard review and 16 Enhanced. Rahul Tyagi Safe Security Sep 11, 2026 1 min read
Templates CAIQ-Aligned Cloud Vendor Assessment Checklist 24 questions for cloud vendor reviews, nine of them cloud-specific. Rahul Tyagi Safe Security Sep 11, 2026 1 min read
Templates SIG-Aligned Vendor Assessment Checklist 23 questions across 22 domains, for onboarding, renewal, material change and approval. Rahul Tyagi Safe Security Sep 11, 2026 1 min read
Threat Research Adobe Commerce Zero-Day, SonicWall RCE Chain, and MikroTik Exploitation Lead This Week’s CVE Priorities By SAFE Threat Research Team This week’s highest-priority vulnerabilities span e-commerce platforms, secure-access appliances, network infrastructure, print management, browsers, unified communications, automation platforms, and AI infrastructure. The strongest… SAFE Safe Security Sep 8, 2026 9 min read
CTEM Shift One: Why CTEM Has to Prioritize Business Risk, Not Severity Part 2 of a four-part series on what the defender’s window requires at enterprise scale. In the first article in this series, we argued that the defender’s window… Rahul Tyagi Safe Security Sep 7, 2026 6 min read
Threat Research CVE-2026-9198 | Critical Unauthenticated RCE in IBM Langflow OSS Disclaimer: This document is published for defensive and educational purposes. All exploitation was performed against an isolated, locally-hosted Docker lab. Do not attempt these techniques against systems you… SAFE Safe Security Sep 6, 2026 10 min read
Threat Research CVE-2026-2652 | MLflow Authentication Bypass – Unauthenticated Access to FastAPI Routes Severity: HIGH | CVSS: 8.6 | Published: May 15, 2026 | Fixed: mlflow 3.10.0 Introduction This document illustrates an Authentication Bypass vulnerability in MLflow – an open-source Machine… SAFE Safe Security Sep 5, 2026 6 min read
Threat Research Artifactory Admin Access, Langflow RCE, and Rails Exploitation Reshape This Week’s CVE Priorities By SAFE Threat Research Team Attackers are concentrating on vulnerabilities that provide more than an initial foothold. This week’s highest-priority CVEs affect systems embedded in software delivery, application… SAFE Safe Security Sep 2, 2026 8 min read