Socket (@SocketSecurity) / X

Socket

3,286 posts

Socket

@SocketSecurity

Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware

https://socket.dev/careers

Joined November 2021

Affiliates Replies Media

Pinned
Socket
@SocketSecurity
May 22
Today is a big day for Socket.
Feross
@feross
May 20
Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M. Four years ago, we started Socket because open source dependencies
Socket
@SocketSecurity
20h
"Socket has won the trust of the whole team. One of our defaults now is to ask whether Socket can solve a problem for us. Anything they build, we want to take a look at it." - @travismcpeak, Security Lead, @cursor_ai
Socket
@SocketSecurity
Aug 7
Maintaining critical software now comes with a security burden that has outgrown what any volunteer can reasonably carry. That's why we're upgrading our open source program from the Team to the Business plan, full protection for maintainers at no cost.
Free Business Plan Upgrades for Open Source Maintainers - So...
From socket.dev
Socket
@SocketSecurity
Aug 6
💎 Ruby's Bundler 4.0.18 extends its cooldown feature to bundle lock and bundle cache. Cooldowns are one of the easiest supply chain controls to add: wait a few days before resolving to a fresh gem, so malicious releases get caught and pulled first. socket.dev/blog/bundler-e…
Made with AI
Socket
@SocketSecurity
Aug 5
A preview of where autonomous hacking may be heading: During a UK cyber test, a Mythos 5 agent used sockpuppets, spearphishing emails, and prompt injection to try to get an open source maintainer to merge malware. socket.dev/blog/ai-agent-… #OpenSource #Cybersecurity
socket.dev
UK Cyber Test: AI Agent Attempted to Social Engineer Open So...
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.