Visitar URL original
Blog: Application Security News and Updates | Socket
New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Socket Blog

The latest in software supply chain security

Read the Socket blog for practical insights on reachability, supply chain security, and the vulnerabilities that actually matter

The Latest From Socket

Recent Posts

All NewsApplication SecurityCompany NewsEmployee SpotlightEngineeringIndustry InsightsProductResearchSecurity FundamentalsSecurity News
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm Packages
Latest

Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm Packages

Application SecurityResearchSecurity News
AI + a16z Podcast: Vibe Coding, Security Risks, and the Path to Progress

AI + a16z Podcast: Vibe Coding, Security Risks, and the Path to Progress

Application SecuritySecurity News
Creating an Effective Vulnerability Management Program for Open Source Vulnerabilities

Creating an Effective Vulnerability Management Program for Open Source Vulnerabilities

Application Security
How to Evaluate an SCA with Reachability: Benchmarking Hard-to-Analyze Language Features

How to Evaluate an SCA with Reachability: Benchmarking Hard-to-Analyze Language Features

Application Security
Comparing Reachability Analysis Providers

Comparing Reachability Analysis Providers

Application Security
The Coana Approach to Reachability Analysis

The Coana Approach to Reachability Analysis

Application Security
Unpacking the ROI of Coana's SCA With Reachability Analysis

Unpacking the ROI of Coana's SCA With Reachability Analysis

Application Security
The Benefit of Doing Reachability Analysis

The Benefit of Doing Reachability Analysis

Application Security
Vulnerability Scanning is Broken

Vulnerability Scanning is Broken

Security NewsApplication Security
CyberBytes Podcast: Open Source Security Shifts Towards Tackling Supply Chain Threats

CyberBytes Podcast: Open Source Security Shifts Towards Tackling Supply Chain Threats

Security NewsApplication Security
How to Protect Your Projects from the Risks of Deprecated npm Packages

How to Protect Your Projects from the Risks of Deprecated npm Packages

Application Security
What Is SCA with Reachability Analysis?

What Is SCA with Reachability Analysis?

Application Security
A Short History of Protestware

A Short History of Protestware

Application SecuritySecurity News
When "Everything" Becomes Too Much: The npm Package Chaos of 2024

When "Everything" Becomes Too Much: The npm Package Chaos of 2024

Application Security
How to Integrate Socket Into Your Bitbucket Pipeline

How to Integrate Socket Into Your Bitbucket Pipeline

Application SecurityProduct
How Socket Combats Insidious Typosquatting Supply Chain Attacks

How Socket Combats Insidious Typosquatting Supply Chain Attacks

Application Security
How to Use Socket in Your GitLab Pipeline for Enhanced Security

How to Use Socket in Your GitLab Pipeline for Enhanced Security

Application SecurityProduct
Risky Biz Podcast: Using LLMs for Analysis and Explanation in Software Supply Chain Security

Risky Biz Podcast: Using LLMs for Analysis and Explanation in Software Supply Chain Security

Application Security
Why Socket is the Best Tool for Developers to Stop Supply Chain Attacks

Why Socket is the Best Tool for Developers to Stop Supply Chain Attacks

Application Security
Limitations of CVE-Based Security Scanners: A Deep Dive into 3 Notable Supply Chain Attacks

Limitations of CVE-Based Security Scanners: A Deep Dive into 3 Notable Supply Chain Attacks

Application Security
Why Your SCA Tool Sucks

Why Your SCA Tool Sucks

Application Security
npm Registry Code Signing

npm Registry Code Signing

Application Security
What's Really Going On Inside Your node_modules Folder?

What's Really Going On Inside Your node_modules Folder?

Application Security
Why Vulnerability Scanning Isn't Enough To Protect Your App

Why Vulnerability Scanning Isn't Enough To Protect Your App

Application Security