
@ApiiroSecurity Secure your agentic development
New York
Joined November 2014
- Tweets756
- Following263
- Followers991
- Likes1.2K
๐จ @claudeai Mythos 5 submitted malicious code to @github.
It used fake id to pressure maintainers into accepting the change. A dev warned the maintainers. They rejected the change.
To protect coding agents you need deep context from code to runtime.
๐
anthropic.com/research/alignโฆ
๐จ ๐ ๐ฎ๐น๐๐ฎ๐ฟ๐ฒ hiding in a photo. Inside an npm package.
@ApiiroSecurity uncovered ๐๐ฎ๐ฟ๐ธ๐ฟ๐ผ๐ผ๐บ, a campaign spanning ๐ญ๐ต ๐ป๐ฝ๐บ ๐ฑ๐ผ๐๐ฒ๐ป๐ ๐น๐ผ๐ผ๐ธ-๐ฎ๐น๐ถ๐ธ๐ฒ๐ distributed through fake GitHub exploit repos.
๐ Full research ๐
lnkd.in/drqXJfyD
Great work @ApiiroSecurity team!
Idan Plotnik retweeted
๐จ ๐ญ๐ณ,๐ฒ๐ญ๐ฌ ๐๐ถ๐๐๐๐ฏ ๐ฟ๐ฒ๐ฝ๐ผ๐ ๐๐ฒ๐ฟ๐๐ถ๐ป๐ด ๐บ๐ฎ๐น๐๐ฎ๐ฟ๐ฒ. About 14,000 re-pushed in 34 hours.
We verified repos distributing SmartLoader in the FakeGit campaign.
The mechanism: keep the repo & change where its download button points. We call it ๐ฅ๐ฒ๐ฃ๐ผ๐ถ๐ป๐๐ถ๐ป๐ด.
The AI race wonโt stop. Security must keep up
Coding agents are the new perimeter. They canโt be solely responsible for securing and governing themselves
Enterprises need an independent security control plane with deterministic guardrails across multi-coding agent and multi-model
Apiiro Named a Leader in the @Gartner_inc Magic Quadrantโข for Software Supply Chain Security ๐ apiiro.com/blog/apiiro-namedโฆ
Replying to @Alex_A_Simons
One of a kind! A true leader - I learned so much from u ๐
Replying to @ApiiroSecurity @ServiceNow
@ApiiroSecurity is revolutionizing #AppSec in the #AI era of software development.
Stay tunedโbig things are coming! Letโs rock, AppSec Heroes! ๐
Blog: apiiro.com/blog/introducing-โฆ

