@ApiiroSecurity Secure your agentic development
New York
Joined November 2014
- Tweets756
- Following263
- Followers991
- Likes1.2K
๐จ @claudeai Mythos 5 submitted malicious code to @github.
It used fake id to pressure maintainers into accepting the change. A dev warned the maintainers. They rejected the change.
To protect coding agents you need deep context from code to runtime.
๐
anthropic.com/research/alignโฆ
๐จ ๐ ๐ฎ๐น๐๐ฎ๐ฟ๐ฒ hiding in a photo. Inside an npm package.
@ApiiroSecurity uncovered ๐๐ฎ๐ฟ๐ธ๐ฟ๐ผ๐ผ๐บ, a campaign spanning ๐ญ๐ต ๐ป๐ฝ๐บ ๐ฑ๐ผ๐๐ฒ๐ป๐ ๐น๐ผ๐ผ๐ธ-๐ฎ๐น๐ถ๐ธ๐ฒ๐ distributed through fake GitHub exploit repos.
๐ Full research ๐
lnkd.in/drqXJfyD
Idan Plotnik retweeted
๐จ ๐ญ๐ณ,๐ฒ๐ญ๐ฌ ๐๐ถ๐๐๐๐ฏ ๐ฟ๐ฒ๐ฝ๐ผ๐ ๐๐ฒ๐ฟ๐๐ถ๐ป๐ด ๐บ๐ฎ๐น๐๐ฎ๐ฟ๐ฒ. About 14,000 re-pushed in 34 hours.
We verified repos distributing SmartLoader in the FakeGit campaign.
The mechanism: keep the repo & change where its download button points. We call it ๐ฅ๐ฒ๐ฃ๐ผ๐ถ๐ป๐๐ถ๐ป๐ด.
The AI race wonโt stop. Security must keep up
Coding agents are the new perimeter. They canโt be solely responsible for securing and governing themselves
Enterprises need an independent security control plane with deterministic guardrails across multi-coding agent and multi-model
Apiiro Named a Leader in the @Gartner_inc Magic Quadrantโข for Software Supply Chain Security ๐ apiiro.com/blog/apiiro-namedโฆ
@ApiiroSecurity is revolutionizing #AppSec in the #AI era of software development.
Stay tunedโbig things are coming! Letโs rock, AppSec Heroes! ๐
Blog: apiiro.com/blog/introducing-โฆ
Idan Plotnik retweeted
As a payments infrastructure provider, @PaddleHQ canโt just float along when it comes to application security. ๐ฃ
They turned to Apiiro to streamline collaboration with developers and propel their #AppSec program forward, enabling them to...
๐ Maintain visibility of Paddleโs entire application estate, including every code change across 100+ pull requests per week.
โณ Give them back 2 days' worth of work each week by automating risk assessments and enforcing policies directly in developers' workflows.
๐ฆ Consolidate their security testing tooling with a unified platform across open source, software supply chain, and secrets security.
๐ Measure the impact their AppSec program has on both security efficiency and engineering productivity metrics.
Read the full story: apiiro.com/resource/paddle-cโฆ
Idan Plotnik retweeted
We sat down with Adam Jordan (@XYLAMIC), Distinguished Engineer & Head of Secure, Sustainable Software at Shell, to talk about how Shellโฆ
๐ค Enables autonomy to deliver secure software
๐ช Defines strong security controls and automation
๐ Measures and articulates #AppSec success
Watch the full interview with @idanplotnik ๐
apiiro.com/resource/adam-jorโฆ
@POTUS you donโt need to develop anything, they can use @ApiiroSecurity
In the wrong hands, AI can make it easier for hackers to exploit vulnerabilities in the software that makes our society run.
Thatโs why Iโm directing the Department of Defense and the Department of Homeland Security to develop game-changing cyber protections that will make our computers and our critical infrastructure more secure than it is today.
โ
Checklist for evaluating, implementing & operationalizing an Application Security Posture Management (#ASPM).
Spoiler ๐ Not all ASPMs are created equal. โ๏ธ
apiiro.com/resource/applicatโฆ
#appsec #devsecops #RiskManagement #supplychain
Idan Plotnik retweeted
โLook how many I killed with my own hands! Your son killed Jews!โ
Listen to a phone call of a Hamas terrorist calling home, bragging about how many people he massacred.
The whole world needs to hear this.
Idan Plotnik retweeted
Hi @BlackHatEvents - I was shocked to discover that one of your Cyber Security Trainer and Review Board Members is also an antisemitic, a terror supporter who publicly denies Hamas Terror acts. Please remove @Voulnet from his role immediately!
Idan Plotnik retweeted
Hi UN Secretary General @antonioguterres. Did this place also not happen in a vacuum? Asking for 6 million friends โฆ
