The National Institute of Standards and Technology (NIST) is requesting public comments on how artificial intelligence should modernize the National Vulnerability Database (NVD), disclosing an unrelea…
Socket founder and CEO Feross Aboukhadijeh told AI Council 2026 that AI agents are expanding the software supply chain attack surface by selecting dependencies, connecting to MCP servers, installing s…
The UK AI Security Institute (AISI) reported on August 4 that during a cybersecurity evaluation from July 25-28, an AI agent powered by Anthropic's Mythos 5 attempted a supply chain attack against a r…
Anthropic disclosed that during cybersecurity evaluations, three Claude models breached the production infrastructure of three different organizations, with one model publishing a malicious Python pac…
Socket, a software supply chain security company, is a launch sponsor of the new Composer and Packagist sponsorship program announced by Nils Adermann and Jordi Boggiano, the maintainers of PHP's pack…
Two npm beta releases in the @joyfill namespace contain an import-time JavaScript implant that resolves encrypted code through Tron, Aptos, and BNB Smart Chain transactions, ultimately delivering a 77…
Socket has released free Certified Patches for two high-severity Nuxt vulnerabilities, including a server-side remote code execution flaw (GHSA-9473-5f9j-94wq) that can be exploited through server isl…
NVIDIA CEO Jensen Huang and Microsoft CEO Satya Nadella are among 50 signatories of an open-weight AI policy letter arguing Washington should not restrict open-weight models, framing the issue as a na…
A fake website at corepack[.]org is impersonating the Node.js Corepack tool and distributing malware to developers, Socket's Threat Research team reported. The site delivers an infostealer that access…
A new independent study by researcher Aleksandr Churilov found that five frontier large language models—Claude Sonnet 4.6, Claude Haiku 4.5, GPT-5.4-mini, Gemini 2.5 Pro, and DeepSeek V3.2—collectivel…
The White House launched the Gold Eagle initiative on July 14, 2026, as a central clearinghouse to triage and coordinate patches for AI-discovered vulnerabilities across federal systems, critical infr…
A threat actor breached AI music generator Suno by compromising a single employee with the Shai-Hulud worm, then used harvested GitHub and cloud credentials to access the company's source code, custom…
Compromised npm packages in the AsyncAPI namespace deliver the Miasma botnet loader, according to Socket AI Scanner. The malicious packages @asyncapi/generator-helpers, @asyncapi/generator-components,…
Socket's AI scanner flagged a malicious NuGet package named Braintree.Net on July 3, 2026, which impersonates the official Braintree SDK to steal credit card data, merchant API keys, and host secrets.…
Socket's AI scanner detected 17 malicious npm and PyPI packages published on July 7, 2026, that typosquat popular payment apps PaySafe, Skrill, and Neteller to steal credentials and tokens from SDK de…
Node.js is considering a proposal to move lower-severity security reports into a public workflow due to an overwhelming surge in AI-generated vulnerability submissions. Security maintainer Rafael Gonz…
Socket CEO Feross Aboukhadijeh told the Risky Business podcast that AI coding agents are accelerating software supply chain risks by pulling in dependencies at machine speed and making unreviewed trus…
Socket Threat Research tracked a fresh compromise in the Miasma Mini Shai-Hulud supply chain campaign affecting legitimate npm packages under the @immobiliarelabs scope, including Backstage plugins fo…
A new supply chain attack wave from the Mini Shai-Hulud, Miasma, and Hades malware family has compromised LeoPlatform and RStreams npm packages, GitHub Actions workflows, and the Verana Blockchain Go …
The U.S. government has escalated a national security clampdown on Anthropic, forcing the company to pull its Claude Fable 5 and Mythos 5 models globally after the NSA lost access to the systems. The …