@ApiiroSecurity Secure your agentic development

New York
Joined November 2014
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
๐Ÿšจ @claudeai Mythos 5 submitted malicious code to @github. It used fake id to pressure maintainers into accepting the change. A dev warned the maintainers. They rejected the change. To protect coding agents you need deep context from code to runtime. ๐Ÿ‘‡ anthropic.com/research/alignโ€ฆ
1
118
๐Ÿšจ ๐— ๐—ฎ๐—น๐˜„๐—ฎ๐—ฟ๐—ฒ hiding in a photo. Inside an npm package. @ApiiroSecurity uncovered ๐——๐—ฎ๐—ฟ๐—ธ๐—ฟ๐—ผ๐—ผ๐—บ, a campaign spanning ๐Ÿญ๐Ÿต ๐—ป๐—ฝ๐—บ ๐—ฑ๐—ผ๐˜๐—ฒ๐—ป๐˜ƒ ๐—น๐—ผ๐—ผ๐—ธ-๐—ฎ๐—น๐—ถ๐—ธ๐—ฒ๐˜€ distributed through fake GitHub exploit repos. ๐Ÿ” Full research ๐Ÿ‘‡ lnkd.in/drqXJfyD
2
54
Idan Plotnik retweeted
๐Ÿšจ ๐Ÿญ๐Ÿณ,๐Ÿฒ๐Ÿญ๐Ÿฌ ๐—š๐—ถ๐˜๐—›๐˜‚๐—ฏ ๐—ฟ๐—ฒ๐—ฝ๐—ผ๐˜€ ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ถ๐—ป๐—ด ๐—บ๐—ฎ๐—น๐˜„๐—ฎ๐—ฟ๐—ฒ. About 14,000 re-pushed in 34 hours. We verified repos distributing SmartLoader in the FakeGit campaign. The mechanism: keep the repo & change where its download button points. We call it ๐—ฅ๐—ฒ๐—ฃ๐—ผ๐—ถ๐—ป๐˜๐—ถ๐—ป๐—ด.
2
1
1
4
417
The AI race wonโ€™t stop. Security must keep up Coding agents are the new perimeter. They canโ€™t be solely responsible for securing and governing themselves Enterprises need an independent security control plane with deterministic guardrails across multi-coding agent and multi-model
3
330
Replying to @Alex_A_Simons
One of a kind! A true leader - I learned so much from u ๐Ÿ’š
1
113