Safe Security retweeted
🚨 CVE-2026-2652: MLflow Authentication Bypass Explained
What happens when authentication is enabled, but critical API routes remain exposed?
🔗 Read the technical breakdown: safe.security/resources/blog…
#CVE20262652 #MLflow #CyberSecurity #CTEM
Next in our TPRM Resources series: the CAIQ-Aligned Cloud Vendor Assessment Checklist.
We’re sharing it to help teams make those expectations clear from the start - with focused questions, supporting evidence requirements, and space to document gaps before approval.
Inside:
• 24 assessment questions, including nine cloud-specific questions covering shared responsibility, tenant isolation, API security, encryption, and more.
• Evidence expectations for every question, plus fields for responses and reviewer notes.
• A six-step review workflow and a worked cloud vendor example.
Use it for cloud vendor onboarding, SaaS renewals, or material service changes.
Download the checklist: safe.security/resources/temp…
🤖 Made with AI
Build your TPRM toolkit with practical templates from our TPRM Resources series.
Featured: the SIG-Aligned Vendor Assessment Checklist.
23 questions across 22 domains, with evidence requirements to guide your reviews.
Download: safe.security/resources/temp…
We’re incredibly proud to share that SAFE has been named a Leader in the 2026 IDC MarketScape for Worldwide Third-Party Risk Management Software.
Which makes this one especially exciting: SAFE entered the TPRM market less than two years ago :)
From day one, our goal has been to rethink how TPRM work gets done - using AI Co-Workers to take on the repetitive work across the vendor lifecycle, so analysts can spend more time on judgment, decisions and strategy.
A huge thank you to our customers, partners, and every SafeStar who has helped us build and push this forward.
Less than two years in, and we’re just getting started. 🚀
London, see you next week. 🇬🇧
SAFE is heading to #GartnerSRM, Sept. 22–24 at ExCeL London.
📍 Booth #701
Come see what we’ve been building - linkedin.com/smart-links/AQG…
What happens when the SIEM becomes the attack surface?
In the latest SAFE Exposure Anatomy, we break down CVE-2026-20253 in Splunk Enterprise 10.x - an unauthenticated arbitrary file write that can lead to RCE.
CVSS: 9.8
Full technical breakdown - linkedin.com/smart-links/AQG…
#Cybersecurity #CVE #Splunk
Before onboarding a SaaS vendor, know who can access your data - and what evidence supports their security claims.
SAFE’s SaaS Vendor Security Questionnaire gives TPRM teams 40 questions across 12 domains, with evidence to request.
Get your copy: linkedin.com/smart-links/AQE…
🤖 Made with AI
A few vulnerabilities worth having on your radar this week:
→ Cisco SEG CVE-2026-76461 - root RCE
→ GitLab CVE-2026-85706 - CI/CD secrets exposed
→ JFrog CVE-2026-42018 + 42016 - admin access
→ N-able CVE-2026-86218 - pre-auth RCE
Full breakdown - safe.security/resources/blog…
🤖 Made with AI
TPRM analysts: sharpen your practical skills in vendor assessments, evidence reviews and risk decisions.
Get @rahultyagihacks Practical TPRM Masterclass, worth $39, FREE for a limited time through SAFE.
Claim access: linkedin.com/smart-links/AQE…
TPRM teams don’t need another lifecycle explainer. They need resources built for real assessments.
Our Vendor Risk Assessment Checklist includes 147 practical questions across evidence, gaps, remediation and risk decisions.
Download your copy -safe.security/resources/temp…
SAFE CTEM is Mythos-ready. Is your security program?
Vulnerability discovery now moves at machine speed.
Meet your CTEM AI Co-worker - 100+ AI agents that discover, prioritize, validate, and drive remediation.
See it live at @BlackHatEvents Booths #4422 & #5506.
Safe Security retweeted
#YoungTurks | From being asked to officiate a founder's marriage to finding clients for portfolio cos—former Cisco CEO @JohnTChambers talks about his love for coaching #startups & how he discovered @uniphore & @SafeCRQ
@ShereenBhan | @CNBCYoungTurks | Voices From The Valley
Safe Security retweeted
Here’s @KyleAlspach’s annual list of the 10 hottest cybersecurity tools and products of the year (so far) from these companies: @CrowdStrike, @PaloAltoNtwks, @CiscoSecure, @SentinelOne, @Netskope, @zscaler, @CatoNetworks, @wiz_io, @Fortinet and @SafeCRQ ↓
bit.ly/4beIGil
Safe Security retweeted
Third-Party Risk Management Is Fundamentally Broken: Let’s Fix It! hubs.li/Q02Dh-JB0 Written by @SaketModi_ of @SafeCRQ
Safe Security retweeted
🚀SUPER NEWS: Delighted to see our partner company @SafeCRQ featured as one of @CRN's Top 10 Hottest #CyberSecurity Tools and Products of 2024, highlighting the company's expansion into the unsolved space of third-party risk management.
Read more here: net.safe.security/resources/…
Safe Security retweeted
As the Co-founder of Safe Security (@SafeCRQ), Rahul Tyagi (@rahultyagihacks) has made it his mission to safeguard the digital infrastructure of multiple Fortune 500 companies across the globe. Meet changemakers like Rahul at the #TechLeadersConclave2024.
Register now - lnkd.in/gz7qKpDY
📣 Have you got your hands on Safe Security's most circulated whitepaper yet?!
Know more: pages.safe.security/Blueprin…
Safe Security retweeted
Cyber Insurance Sunday – Upload
Here it is—Your Cyber Insurance Sunday—Upload. The latest cybersecurity insurance news. A few items from the week; @BforeAI looks over the horizon, @Mosaic1609, INCYDE Risk and @SafeCRQ make it a trio, The Identity Defined Security Alliance (@idsalliance) peeks in at Identity Security, and the Federal Bureau of Investigation (@FBI ) deals a blow to a botnet. Some we reported on, and others we found interesting. There’s more. Take a look. Share it. Enjoy the reads. Enjoy the day!
Read it: cyberinsurancenews.org/cyber…
#cyberinsurance #cyberliabilityinsurance #cybersecurity
Safe Security retweeted
Thrilled to see JC2-backed @SafeCRQ release its new tool, the Safe TPRM module, which will revolutionize third-party risk quantification. Read this @CRN article to learn more & discover how @SaketModi_, CEO & co-founder, is transforming security standards.
crn.com/news/security/2024/s…

















