Socket Headlines

Inc.

Inc. covers a podcast discussion with Truffle Security CEO Dylan Ayrey and Socket CEO Feross Aboukhadijeh about the security risks of AI agents that have access to company secrets, including how these attacks lower the barrier for hacking.

Companies:Truffle SecuritySocket

Microsoft Newsroom

The Linux Foundation joined Cisco, Dell Technologies, IBM, Meta, Microsoft, NVIDIA and other industry signatories in an open letter which makes the case that open weight models are an essential part of the foundation for secure, universally accessible and innovative AI . The letter argues that the right response to the real risks of open weights is a stronger open ecosystem rather than prohibition, and that policymakers should encourage rather than restrict frontier open models.

Companies:CloudbeesGitLabHugging FaceLangChain+40 more

Cybernoz

Socket is among the security firms that reported on the compromise of 145 Mastra npm packages via a hijacked contributor account.

Companies:Socket

Cybernoz

Socket Research Team uncovered a large-scale supply chain attack on Mastra npm packages using typosquatting dependency easy-day-js.

Companies:Socket

InfoSec Today

Socket contributed to the discovery of a supply chain attack compromising 144 Mastra npm packages via the easy-day-js typosquatting dependency.

Companies:MastraSocket

Data Today

Data Today's live coverage of the Miasma worm includes multiple references to Socket's research, campaign tracker, and detection of the PyPI wave.

Companies:SafeDepSocket

developer-tech.com

Replit integrates Socket Firewall into its IDE to block malicious packages in real time during AI-assisted development.

Companies:Socket

Digg

Replit partnered with Socket to launch a Package Firewall that blocks malicious packages before they reach apps.

Companies:Socket

Phoenix Security

Phoenix Security analyzes the Miasma campaign, referencing Socket's discovery of 37 malicious PyPI wheels and the broader campaign tracking.

Companies:Socket

SecurityWeek

SecurityWeek reports on the Miasma/Hades supply-chain campaign, citing Socket's research and campaign tracker documenting over 100 affected packages.

Companies:Socket

HackWire

Article republishing BleepingComputer's report on Socket's discovery of Shai-Hulud attack on PyPI packages.

Companies:Socket

BleepingComputer

BleepingComputer reports on a Shai-Hulud supply-chain attack discovered by Socket, which identified 37 malicious PyPI packages using .pth startup hooks.

Companies:Socket

Safeguard.sh Blog

Safeguard.sh analyzes the TrapDoor attack, referencing Socket's disclosure and detection methods.

Companies:Socket

SecurityBrief

Socket raises $60M Series C at $1B valuation led by Thrive Capital to secure software supply chains.

Companies:Socket

ForkLog

Socket reports a supply chain attack targeting crypto and AI developers.

Companies:Socket

Menlo Times

Socket raises $60M and expands security platform to protect AI-driven development from supply chain attacks.

Companies:Socket

Crypto Economy

Crypto Economy reports on Socket's detection of 34 malicious packages in a campaign targeting crypto ecosystems.

Companies:Socket

Glitchwire

Glitchwire covers Socket's disclosure of the TrapDoor campaign, which steals credentials across multiple package registries.

Companies:Socket

Ventureburn

Ventureburn reports on Socket's $60M Series C funding to enhance AI security and supply chain protection.

Companies:Socket

SiliconANGLE

SiliconANGLE reports Socket's $60M Series C funding at $1B valuation, with details on platform and plans.

Companies:Socket

Pulse 2.0

Pulse 2.0 reports Socket's $60M Series C funding, emphasizing protection for AI-generated code.

Companies:Socket

Socket Blog

Socket announces $60M Series C funding at $1B valuation led by Thrive Capital to expand software supply chain security for AI-driven development.

Companies:Socket

BleepingComputer

Socket detected the node-ipc compromise and provided analysis.

Companies:Socket

BleepingComputer

Socket tracked 416 compromised package artifacts in the Shai Hulud attack.

Companies:SafeDepSocket

heise online

heise online reports on the TanStack attack, quoting Socket's recommendations for developers.

Companies:Socket