From Provenance to Protection: Navigating the Software Supply Chain and Memory Safety in SDV Software

In this 2026 Auto-ISAC Virtual Partner Week session, Joe Saunders, Founder & CEO of RunSafe Security, explains how OEMs and suppliers can better understand what is inside their software, identify true software supply chain risk, and reduce the exploitability of memory safety vulnerabilities.

Auto-ISAC 2026: Software Supply Chain & Memory Safety

How Automotive Teams Can Improve Software Visibility and Reduce Memory Safety Risk

Software-defined vehicles rely on complex software supply chains, long-lived embedded systems, and millions of lines of C and C++ code. As AI accelerates vulnerability discovery and exploit development, automotive teams need more than faster patching — they need stronger software visibility and built-in protection.

In this 2026 Auto-ISAC Virtual Partner Week session, Joe Saunders, Founder & CEO of RunSafe Security, explains how OEMs and suppliers can better understand what is inside their software, identify true software supply chain risk, and reduce the exploitability of memory safety vulnerabilities.

Joe discusses the limitations of binary-based SBOMs, the importance of build-time software bill of materials generation, and the need to trace software provenance across complex supplier ecosystems. He also explains how memory safety flaws such as buffer overflows, use-after-free errors, and heap corruption can put automotive platforms at risk — especially as vehicles are expected to remain supported for 20 to 25 years.

The session highlights how RunSafe Identify provides accurate build-time SBOM visibility and vulnerability insight, while RunSafe Protect helps harden software against memory-based exploitation at runtime.

Watch the session to learn how automotive software teams can move from reactive vulnerability management to proactive software resilience.

Converting A C++ Codebase To Rust

Converting A C++ Codebase To Rust

https://www.youtube.com/watch?v=m5jFze1z7bo   How RunSafe Migrated a 30,000-Line C++ Codebase to Rust Memory-safe languages like Rust are often recommended for new development — but rewriting large, security-critical C++ systems is rarely straightforward. In this...

read more
How RunSafe Protects VxWorks Systems from URGENT/11 Exploits

How RunSafe Protects VxWorks Systems from URGENT/11 Exploits

Stopping URGENT/11 Attacks with RunSafe Protect In this demo, we show how RunSafe Protect defends VxWorks-based embedded systems from URGENT/11 memory safety exploits. You’ll see a vulnerable system challenged by a simulated attack and then observe how RunSafe’s...

read more
RunSafe Security in 2 Minutes: Protecting Critical Software

RunSafe Security in 2 Minutes: Protecting Critical Software

Inside RunSafe: A Quick Look at Our Mission, Platform, and Impact RunSafe Security is dedicated to protecting the world’s most critical software across defense, infrastructure, automotive, and medical systems. In this video, you’ll see how our platform delivers a...

read more