Jerod Santo Joins Socket as Head of Media
Brief
We need to talk. Supply chain attacks are going parabolic in both frequency and impact. There are so many hacks now that we gussy ‘em up with names like GemStuffer, SANDWORM_MODE, and TrapDoor just to keep track of the onslaught. (Remember Heartbleed? The O. G.
(Original Gussy)) We’ve also got frontier models escaping their sandboxes to hack third parties, zero-click worms spreading through WeChat without any user interaction, AI-discovered zero days being used by criminal enterprises, and so many more I’d lose you by listing them all. But it’s not all doom and gloom.
The same tools that discover and exploit unknown vulnerabilities in open source codebases are being used to find and fix critical software, too. It’s that age ol’ game of security cat and mouse, turned up to 11.