|
Using Trusted Protocols Against You: Gmail as a C2 Mechanism...
|
Olivia Brown |
2025-04-30 |
1,002 |
5
|
|
A New Overview in our Dashboard
|
André Staltz |
2025-04-29 |
757 |
3
|
|
Introducing Socket Fix for Safe, Automated Dependency Upgrad...
|
John-David Dalton |
2025-04-25 |
575 |
--
|
|
Introducing Historical Analytics – Now in Beta
|
Phil Gates-Idem |
2025-04-24 |
504 |
2
|
|
CISA Rebuffs Funding Concerns as CVE Foundation Draws Critic...
|
Sarah Gooding |
2025-04-24 |
1,133 |
5
|
|
Socket Acquires Coana to Bring Reachability Analysis to Ever...
|
Feross Aboukhadijeh |
2025-04-23 |
1,242 |
--
|
|
Introducing Module Reachability: Focus on the Vulnerabilitie...
|
Trevor Norris |
2025-04-23 |
656 |
3
|
|
Connect with Socket at RSA and BSidesSF 2024
|
Sarah Gooding |
2025-04-23 |
519 |
2
|
|
Socket Acquires Coana to Bring Best-in-Class Reachability An...
|
Feross Aboukhadijeh |
2025-04-23 |
539 |
--
|
|
Introducing Repository Labels and Security Policies
|
Nolan Lawson |
2025-04-22 |
488 |
6
|
|
The Bad Seeds: Malicious npm and PyPI Packages Pose as Devel...
|
Kirill Boychenko |
2025-04-22 |
1,180 |
3
|
|
Introducing .NET Support in Socket
|
Joe Werle |
2025-04-21 |
764 |
7
|
|
npm Malware Targets Telegram Bot Developers with Persistent ...
|
Kush Pandya |
2025-04-18 |
797 |
--
|
|
Python Tools Are Quickly Adopting the New pylock.toml Standa...
|
Sarah Gooding |
2025-04-18 |
664 |
1
|
|
vlt Launches Real-Time Dependency Analysis Powered by Socket...
|
Sarah Gooding |
2025-04-17 |
323 |
4
|
|
Go Support Is Now Generally Available
|
Joe Werle |
2025-04-17 |
449 |
4
|
|
CISA Extends MITRE Contract as Crisis Accelerates Alternativ...
|
Sarah Gooding |
2025-04-16 |
788 |
5
|
|
Rubygems Ecosystem Support Now Generally Available
|
Eli Insua |
2025-04-15 |
385 |
--
|
|
Malicious npm Package Disguised as Advcash Integration Trigg...
|
Socket Research Team |
2025-04-14 |
937 |
3
|
|
Turtles, Clams, and Cyber Threat Actors: Shell Usage - Socke...
|
Kirill Boychenko |
2025-04-11 |
1,097 |
2
|
|
VulnCon 2025: NVD Scraps Industry Consortium Plan, Raising Q...
|
Sarah Gooding |
2025-04-10 |
688 |
2
|
|
Redesigned Repositories Page: A Faster Way to Prioritize Sec...
|
Sarah Gooding |
2025-04-09 |
434 |
--
|
|
UK Officials Consider Banning Ransomware Payments from Publi...
|
Sarah Gooding |
2025-04-08 |
565 |
2
|
|
The Rise of Slopsquatting: How AI Hallucinations Are Fueling...
|
Sarah Gooding |
2025-04-08 |
1,211 |
11
|
|
NVD Quietly Sweeps 100K+ CVEs Into a “Deferred” Black Hole -...
|
Sarah Gooding |
2025-04-04 |
912 |
--
|
|
PyTorch Lightning Exposes Users to Remote Code Execution via...
|
Sarah Gooding |
2025-04-03 |
535 |
--
|
|
Malicious PyPI Package Targets WooCommerce Stores with Autom...
|
Socket Research Team |
2025-04-02 |
1,196 |
3
|
|
OpenGrep Restores Fingerprinting in JSON and SARIF Outputs -...
|
Sarah Gooding |
2025-03-31 |
510 |
3
|
|
Python Adopts Standard Lock File Format for Reproducible Ins...
|
Sarah Gooding |
2025-03-31 |
678 |
8
|
|
NVD Concedes Inability to Keep Pace with Surging CVE Disclos...
|
Sarah Gooding |
2025-03-28 |
986 |
3
|
|
Obfuscation 101: Unmasking the Tricks Behind Malicious Code ...
|
Kush Pandya |
2025-03-28 |
768 |
6
|
|
Meet the Socket Team at RSAC and BSidesSF 2025
|
Sarah Gooding |
2025-03-27 |
568 |
2
|
|
Biome Announces v2.0 Beta with Plugin System and Type Inform...
|
Sarah Gooding |
2025-03-25 |
795 |
--
|
|
Next.js Patches Critical Middleware Vulnerability (CVE-2025-...
|
Sarah Gooding |
2025-03-24 |
642 |
--
|
|
Socket Now Available on Google Cloud Marketplace
|
Sarah Gooding |
2025-03-21 |
374 |
--
|
|
High Salaries No Longer Enough to Attract Top Cybersecurity ...
|
Sarah Gooding |
2025-03-21 |
791 |
--
|
|
Node.js TSC Votes to Stop Distributing Corepack
|
Sarah Gooding |
2025-03-19 |
772 |
2
|
|
Oxlint Now in Beta with 500+ Built-in Rules and 2X Faster Ja...
|
Sarah Gooding |
2025-03-18 |
735 |
4
|
|
GitHub Actions Supply Chain Attack Puts Thousands of Project...
|
Sarah Gooding |
2025-03-17 |
636 |
3
|
|
TypeScript is Porting Its Compiler to Go for 10x Faster Buil...
|
Sarah Gooding |
2025-03-11 |
1,083 |
--
|
|
Lazarus Expands Malicious npm Campaign: 11 New Packages Add ...
|
Kirill Boychenko |
2025-03-11 |
1,054 |
--
|
|
Lazarus Strikes npm Again with New Wave of Malicious Package...
|
Kirill Boychenko |
2025-03-10 |
1,052 |
--
|
|
The Pair Program Podcast: Feross Aboukhadijeh on Preserving ...
|
Sarah Gooding |
2025-03-10 |
481 |
3
|
|
Free Software Foundation Goes to Bat for AGPL in Amicus Brie...
|
Sarah Gooding |
2025-03-06 |
775 |
9
|
|
Typosquatted Go Packages Deliver Malware Loader Targeting Li...
|
Kirill Boychenko |
2025-03-04 |
989 |
11
|
|
Bybit Hack Puts Crypto Losses at $1.6B, Surpassing All of La...
|
Sarah Gooding |
2025-03-03 |
1,019 |
4
|
|
OpenSSF Launches Open Source Project Security Baseline to St...
|
Sarah Gooding |
2025-02-28 |
999 |
3
|
|
vlt Launches "reproduce": A New Tool Challenging the Limits ...
|
Sarah Gooding |
2025-02-26 |
877 |
--
|
|
Malicious PyPI Package Exploits Deezer API for Coordinated M...
|
Kirill Boychenko |
2025-02-25 |
1,072 |
3
|
|
Black Basta’s Dependency Confusion Ambitions and Ransomware ...
|
Kirill Boychenko |
2025-02-24 |
1,112 |
2
|