A security expert warns that AI agents are creating a new software supply chain risk by fetching and running unvetted open-source packages in ephemeral sandboxes, bypassing traditional scanners and re…
Socket MCP has expanded its AI assistant capabilities to include organization alert review, threat feed investigation, and package file inspection, enabling AppSec and engineering teams to triage supp…
Socket Threat Research identified shai_hulululud@1.0.48596, an npm package designed to probe AI-based malware scanners using prompt injection, token flooding, and obfuscated JavaScript. The package co…
Socket's Threat Research team identified 23 new malicious PyPI packages in the Mini Shai-Hulud, Miasma, and Hades supply chain attacks, expanding the campaign to 471 artifacts across npm and PyPI. The…
The US government forced Anthropic to suspend its Claude Fable 5 and Claude Mythos 5 models three days after launch, citing a national security directive over a reported jailbreak method. Anthropic di…
Socket appointed Andrew Becherer as its first Chief Information Security Officer. Becherer, former CISO at Datadog and Iterable, will lead security, compliance, and risk as the company protects over 2…
Socket has partnered with Replit to integrate its Socket Firewall into Replit's AI-powered development platform, blocking approximately 8,000 malicious open source packages per day. The partnership ai…
Socket Threat Research identified 23 new malicious PyPI packages in the Mini Shai-Hulud, Miasma, and Hades supply chain attacks, targeting bioinformatics and AI/MCP developers with trojanized native e…
Socket detected a coordinated PyPI compromise involving 37 malicious wheel artifacts across 19 packages, part of the Shai-Hulud/Miasma campaign that uses Python startup execution to download Bun and r…