CocoaPods vulnerabilities highlight risks in dependency managers
Three critical vulnerabilities have been disclosed for the CocoaPods dependency manager. These vulnerabilities exposed more than 3 million iOS and macOS apps to supply chain attacks between 2014 and 2023, allowing attackers to hijack pods (software packages), execute code, and gain session tokens.
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
Finding vulnerabilities in modern web apps using Claude Code and OpenAI CodexSemgrep
How Semgrep & StackHawk Help AppSec Teams Prioritize Real RisksSemgrep
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
How to Conduct an AI Agent Security Audit [+ Checklist]Zapier
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket
Introducing Dependency Divergence GitHub ActionSocket
Announcing dependency caching for Pulumi DeploymentsPulumi
Forward Compatibility and Toolchain Management in Go 1.21 - The Go Programming LanguageGo
Understanding CSRF attacksVercel
Deepgram Rises to #1 on G2 and Receives Stevie Award for Customer Service - Deepgram Blog ⚡️Deepgram
How to Protect Your Projects from the Risks of Deprecated npm PackagesSocket
Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket
runc container breakout vulnerabilities: A technical overviewCncf
Callouts - MintlifyMintlify
Enhance Your Voice AI Windows Applications with the Deepgram .NET 4.0 SDKDeepgram
White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered VulnerabilitiesSocket
How to Integrate Socket Into Your Bitbucket PipelineSocket
