Solutions Engineer @SocketSecurity | ex-Founding Engineer @momentohq 🐵 息子の大ファン🐯
Seattle
Joined September 2022
- Tweets1.9K
- Following544
- Followers395
- Likes5.3K
Pinned Tweet
I joined @SocketSecurity as Sales Engineer, Commercial! Excited to deep dive into software supply chain security and discussions with customers 🎉
SocketにSales Engineerとしてジョインしました！これからまた技術を通してお客様とお話できるのが楽しみです😊
Erika N Tharp (サープ恵里花) retweeted
The PHP Foundation says Chainguard unilaterally broke the embargo and published built images containing the critical RCE fixes more than six hours early:
“This disregarded weeks of work by many parties toward a coordinated disclosure.”
socket.dev/blog/php-embargo-…
🚀 @SocketSecurity to the rescue
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
Erika N Tharp (サープ恵里花) retweeted
The vulnerabilities let attackers execute code on web servers without logging in. Cloudflare is already seeing exploits in the wild.
Changing php.ini settings won't fully protect you. WAF rules are a stopgap. Patch the PHP runtime now.
socket.dev/blog/php-critical…
Erika N Tharp (サープ恵里花) retweeted
🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline.
Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.
‼️
Socket flagged all seven malicious wheels within seven minutes of publication.
The malware runs at Python startup, even without importing LiteLLM. The release workflow built container images from a lookalike repository.
Full analysis: socket.dev/blog/litellm-comp…
Erika N Tharp (サープ恵里花) retweeted
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.
Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
Erika N Tharp (サープ恵里花) retweeted
不正アクセス、中国AI「ARTEX」が日本標的 金融やECなど業種絞り攻撃
nikkei.com/article/DGXZQOUC1…
見つかった攻撃用サーバーは氷山の一角の可能性。盗むデータはクレジットカード情報やIDパスワードなど業種ごとに異なるといいます。
Erika N Tharp (サープ恵里花) retweeted
【不正アクセスによる情報漏洩に関するお詫びとご報告】
PingCAPにおいて第三者による不正アクセスが確認されたため、現在調査および必要な対応を進めております。
関係者の皆様には多大なご迷惑とご心配をおかけし、深くお詫び申し上げます。
弊社、外部調査機関ともにTiDB Cloudを調査した結果、TiDB Cloud への不正アクセス、クレジットカード情報の流出は確認されておりません。
経緯および詳細につきましては、下記Webサイトにて随時報告いたします。
pingcap.co.jp/trust-hub/secu…
Erika N Tharp (サープ恵里花) retweeted
🧊 Rust 1.100 will let developers put fresh dependency releases on ice.
Cargo’s opt-in cooldowns give researchers and maintainers time to catch malicious crates before more projects pull them in.
socket.dev/blog/rust-cargo-c…
Erika N Tharp (サープ恵里花) retweeted
これはきつい・・・
【重要】Linuxカーネルの脆弱性（CVE-2026-99999）に関する当社サービスへの影響について sakura.ad.jp/corporate/infor…
Erika N Tharp (サープ恵里花) retweeted
🎙️ @andrewbecherer on the Build vs Buy decision for security teams in the agentic AI era
Erika N Tharp (サープ恵里花) retweeted
Deno spent years persuading developers to bet on a better runtime. Now its creator sees “marginal” gains in a project “sucked into the gravity well of node compatibility.”
The backlash, the forks, and how AI is changing the future of JavaScript runtimes.
socket.dev/blog/deno-acquisi…
Erika N Tharp (サープ恵里花) retweeted
Anthropic is giving open source maintainers a fast track to Mythos vulnerability findings.
Its free OSS Scanner delivers recurring audits, reports showing how to reproduce vulnerabilities, and proposed fixes when available.
socket.dev/blog/anthropic-os…
Erika N Tharp (サープ恵里花) retweeted
Excited to launch this! 🎉 If you're building in collaboration with agents on Origin, install the Socket integration to keep an eye on the dependencies they bring in and flag any supply chain risks.
🚀 Socket for Origin is now available in @cursor_ai’s App Marketplace!
Automatically scan dependency changes for malware, compromised updates, and other supply chain risks. Get findings directly on your pull requests, before you merge.
socket.dev/blog/socket-for-o…
Erika N Tharp (サープ恵里花) retweeted
🚀 Socket for Origin is now available in @cursor_ai’s App Marketplace!
Automatically scan dependency changes for malware, compromised updates, and other supply chain risks. Get findings directly on your pull requests, before you merge.
socket.dev/blog/socket-for-o…
Erika N Tharp (サープ恵里花) retweeted
Agent Baseline published a reference architecture today for securing software factories, with four boundaries enforced outside the agent.
Co-authored by Socket CTO @AhmadNassri with @ealeyner, @ianlivingstone, @vtahowe, and other industry leaders.
socket.dev/blog/agent-baseli…
Erika N Tharp (サープ恵里花) retweeted
Software Factory Show and Tell is TOMORROW after @aiDotEngineer 🗽 🥂 ✨
At Elsie Rooftop with food and drinks luma.com/keycard-rg1c
We'll dig into this live TOMORROW after @aiDotEngineer with @ianlivingstone, @AhmadNassri, @ealeyner, @DickHardt, @braintrust, @SocketSecurity, @KeycardAI. Panel, then live demos.
At Elsie Rooftop 🥂🗽 luma.com/keycard-rg1c
