Aikido Security (@AikidoSecurity) / X

Aikido Security

2,068 posts

Aikido Security

@AikidoSecurity

Secure everything devs build, ship & run. 🌐 aikido.dev ⭐️ github.com/AikidoSec Get developers back to building.

San Francisco, CA

aikido.dev

Joined September 2022

Pinned
Aikido Security
@AikidoSecurity
May 14
Aikido Intel is your earliest warning for supply chain threats. Our engine detects malware and vulnerabilities in open-source ecosystems within minutes. Built by our team of security researchers & AI engineers. Bookmark it: intel.aikido.dev
59K
Aikido Security
@AikidoSecurity
Jun 13
hashtag marketing
Madeline Lawrence
@madelinelawren
Jun 12
If u see an ad that says “npm install ur-mom” that was me
1.4K
Aikido Security reposted
BleepingComputer
@BleepinComputer
Jun 12
phpBB forum fixes auth bypass bug lurking for a decade bleepingcomputer.com/news/security/…
phpBB forum fixes auth bypass bug lurking for a decade
From bleepingcomputer.com
5.1K
Aikido Security reposted
Jorian
@J0R1AN
Jun 12
Fun fact: due to chromium's mime type sniffing, you can return GIF bytes with content type image/png and it still works 😇
pilvar (Philippe Dourassov)
@pilvar222
Jun 12
1) what
00:00
2.5K
Aikido Security reposted
pilvar (Philippe Dourassov)
@pilvar222
Jun 12
1) what
00:00
Madeline Lawrence
@madelinelawren
Jun 12
If u see an ad that says “npm install ur-mom” that was me
5.7K
Aikido Security
@AikidoSecurity
Jun 12
Replying to @AikidoSecurity
read more:
Move over, Mythos. Here comes any model with a good harness.
From aikido.dev
549
Aikido Security
@AikidoSecurity
Jun 12
Fable 5 is Mythos with a lot of guardrails in place. If you give it a prompt that it thinks is related to cybersecurity, it hands the question off to Opus 4.8. That means it's not something we can meaningfully benchmark for offensive security use cases right now. And it’s a
1.7K
Aikido Security reposted
Madeline Lawrence
@madelinelawren
Jun 12
If u see an ad that says “npm install ur-mom” that was me
Andrew McCalip
@andrewmccalip
Jun 11
Get paid to wait The Claude Code spinner might be the most watched line on Earth. So I turned it into an ad marketplace. Advertisers bid on it. You keep 50% of the money. Install the extension → get cash from ads. Introducing Kickbacks
00:00
14K
Aikido Security
@AikidoSecurity
Jun 12
a new bombshell has entered the villa
00:24
Andrew McCalip
@andrewmccalip
Jun 11
Get paid to wait The Claude Code spinner might be the most watched line on Earth. So I turned it into an ad marketplace. Advertisers bid on it. You keep 50% of the money. Install the extension → get cash from ads. Introducing Kickbacks
1.5K
Aikido Security
@AikidoSecurity
Jun 11
Replying to @AikidoSecurity
read more
npm v12 delivers one of the biggest security improvements in years
From aikido.dev
533
Aikido Security
@AikidoSecurity
Jun 11
npm v12 will stop running dependency install scripts by default. Postinstall scripts have powered many recent npm supply chain attacks, from Nx s1ngularity to Shai-Hulud. It won’t solve everything, and it should not have taken this long, but it closes a very real attack path.
5.5K
Aikido Security
@AikidoSecurity
Jun 11
Replying to @AikidoSecurity
What MDM Can't Protect on Developer Machines
From aikido.dev
531
Aikido Security
@AikidoSecurity
Jun 11
Your MDM is doing exactly what it was designed to do. The problem is that how developers work today has quietly outgrown it. npm packages, VS Code extensions, browser plugins, AI coding tools. None of these are things MDM can see. So what actually helps?
953