Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
High Salaries No Longer Enough to Attract Top Cybersecurity ... Sarah Gooding 2025-03-21 791 --
Next.js Patches Critical Middleware Vulnerability (CVE-2025-... Sarah Gooding 2025-03-24 642 --
Biome Announces v2.0 Beta with Plugin System and Type Inform... Sarah Gooding 2025-03-25 795 --
Meet the Socket Team at RSAC and BSidesSF 2025 Sarah Gooding 2025-03-27 568 2
NVD Concedes Inability to Keep Pace with Surging CVE Disclos... Sarah Gooding 2025-03-28 986 3
Obfuscation 101: Unmasking the Tricks Behind Malicious Code ... Kush Pandya 2025-03-28 768 6
OpenGrep Restores Fingerprinting in JSON and SARIF Outputs -... Sarah Gooding 2025-03-31 510 3
Python Adopts Standard Lock File Format for Reproducible Ins... Sarah Gooding 2025-03-31 678 8
Malicious PyPI Package Targets WooCommerce Stores with Autom... Socket Research Team 2025-04-02 1,196 3
PyTorch Lightning Exposes Users to Remote Code Execution via... Sarah Gooding 2025-04-03 535 --
NVD Quietly Sweeps 100K+ CVEs Into a “Deferred” Black Hole -... Sarah Gooding 2025-04-04 912 --
UK Officials Consider Banning Ransomware Payments from Publi... Sarah Gooding 2025-04-08 565 2
The Rise of Slopsquatting: How AI Hallucinations Are Fueling... Sarah Gooding 2025-04-08 1,211 11
Redesigned Repositories Page: A Faster Way to Prioritize Sec... Sarah Gooding 2025-04-09 434 --
VulnCon 2025: NVD Scraps Industry Consortium Plan, Raising Q... Sarah Gooding 2025-04-10 688 2
Turtles, Clams, and Cyber Threat Actors: Shell Usage - Socke... Kirill Boychenko 2025-04-11 1,097 2
Malicious npm Package Disguised as Advcash Integration Trigg... Socket Research Team 2025-04-14 937 3
Rubygems Ecosystem Support Now Generally Available Eli Insua 2025-04-15 385 --
CISA Extends MITRE Contract as Crisis Accelerates Alternativ... Sarah Gooding 2025-04-16 788 5
vlt Launches Real-Time Dependency Analysis Powered by Socket... Sarah Gooding 2025-04-17 323 4
Go Support Is Now Generally Available Joe Werle 2025-04-17 449 4
npm Malware Targets Telegram Bot Developers with Persistent ... Kush Pandya 2025-04-18 797 --
Python Tools Are Quickly Adopting the New pylock.toml Standa... Sarah Gooding 2025-04-18 664 1
Introducing .NET Support in Socket Joe Werle 2025-04-21 764 7
Introducing Repository Labels and Security Policies Nolan Lawson 2025-04-22 488 6
The Bad Seeds: Malicious npm and PyPI Packages Pose as Devel... Kirill Boychenko 2025-04-22 1,180 3
Socket Acquires Coana to Bring Reachability Analysis to Ever... Feross Aboukhadijeh 2025-04-23 1,242 --
Introducing Module Reachability: Focus on the Vulnerabilitie... Trevor Norris 2025-04-23 656 3
Connect with Socket at RSA and BSidesSF 2024 Sarah Gooding 2025-04-23 519 2
Socket Acquires Coana to Bring Best-in-Class Reachability An... Feross Aboukhadijeh 2025-04-23 539 --
Introducing Historical Analytics – Now in Beta Phil Gates-Idem 2025-04-24 504 2
CISA Rebuffs Funding Concerns as CVE Foundation Draws Critic... Sarah Gooding 2025-04-24 1,133 5
Introducing Socket Fix for Safe, Automated Dependency Upgrad... John-David Dalton 2025-04-25 575 --
A New Overview in our Dashboard André Staltz 2025-04-29 757 3
Using Trusted Protocols Against You: Gmail as a C2 Mechanism... Olivia Brown 2025-04-30 1,002 5
wget to Wipeout: Malicious Go Modules Fetch Destructive Payl... Kush Pandya 2025-05-01 885 10
NPM targeted by malware campaign mimicking familiar library... Socket Research Team 2025-05-02 902 5
AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerab... Sarah Gooding 2025-05-06 964 11
Backdooring the IDE: Malicious npm Packages Hijack Cursor Ed... Kirill Boychenko 2025-05-07 957 3
Node.js TSC Declines to Endorse Feature Bounty Program - Soc... Sarah Gooding 2025-05-07 950 2
Malicious npm Packages Use Telegram to Exfiltrate BullX Cred... Kush Pandya 2025-05-08 772 3
MCP Community Begins Work on Official MCP Metaregistry - Soc... Sarah Gooding 2025-05-09 900 --
Socket at Black Hat and DEF CON 2023 Amjed Aboukhadijeh 2025-05-12 176 1
CISA Kills Off RSS Feeds for KEVs and Cyber Alerts Sarah Gooding 2025-05-12 784 --
ESLint Adds Official Support for Linting HTML Sarah Gooding 2025-05-13 575 --
The Landscape of Malicious Open Source Packages: 2025 Mid‑Ye... Socket Research Team 2025-05-14 1,175 2
Malicious Koishi Chatbot Plugin Exfiltrates Messages Trigger... Kirill Boychenko 2025-05-19 757 4
Open Source Maintainers Demand Ability to Block Copilot-Gene... Sarah Gooding 2025-05-20 1,016 14
NIST Under Federal Audit for NVD Processing Backlog and Dela... Sarah Gooding 2025-05-20 669 2
Malicious npm Packages Target React, Vue, and Vite Ecosystem... Kush Pandya 2025-05-21 1,083 --
Plushcap, by Matt Makai. 2021-2026.