Flux
Couleur d'accent
Toutes les catégories

Programmation

3656 articles

Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX

Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX

Socket uncovered a theme cluster spanning four Visual Studio Marketplace and six Open VSX extensions, including two confirmed malicious extensions and a high-confidence link to GlassWorm. The Socket Threat Research team identified two suspicious VS Code themes still available on the Visual Studio Marketplace at the time of writing: Coca-Cola Christmas and Aurora Borealis Studio Theme. Both present themselves as polished color themes, contain executable JavaScript despite primarily providing…

Socket
The PHP Podcast 2026.10.01

The PHP Podcast 2026.10.01

🎙️ PHP Podcast – October 1, 2026 Hosts: Joe Ferguson, Sara Golemon & Holly Schilling It’s John’s birthday, so naturally he skipped. The PHP Foundation is hiring, 8.6 picks up a surprise RC, and the crew goes deep on ABI promises, deprecation pile-ups, generics, and a childhood firefighter who’s still “a hit.” 🎂 John’s Birthday […] The post The PHP Podcast 2026.10.01 appeared first on PHP Architect.

PHP Architect
pwasm 0.2a0

pwasm 0.2a0

Release: pwasm 0.2a0 pwasm is one of my folly projects - an entirely vibe-coded pure Python WebAssembly engine that I built in January during my first bout of AI mania. I hadn't touched it since January, so I decided to let Claude Opus 5.5 loose on it and see if it could make any significant improvements: Evaluate current state of pwasm - then consider what it would take to get the MicroPython and micro JavaScript experiments from the research repo working under it - and what it would take to…

Simon Willison's Weblog
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security

Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security

The financial sector operates in a hyper-targeted, unforgiving threat landscape. As the guardians of sensitive data and global economic infrastructure, financial institutions frequently face sophisticated cyber threats and some of the most rigorous regulatory scrutiny in the world. Yet, like every modern enterprise, they rely heavily on open source software to drive innovation and speed. Securing that open source foundation without slowing down engineering teams is a massive challenge. That is…

Socket
Quoting Matthew Green

Quoting Matthew Green

[...] Put these pieces together and you have the two halves of a worm: a payload that hijacks the agent, and an agent that will carry the payload to the next agent. Agents in separately-isolated sandboxes discovered that they could leave instructions for each other in a shared package cache, and those instructions changed what the recipients did. Replace the package cache with email, Slack and shared documents or WhatsApp, and replace independently-sandboxed training runs with…

Simon Willison's Weblog
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls

Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls

A coding agent blocked from installing a package may try another way to download it. In this episode of the Insecure Agents podcast recorded at Black Hat, Socket CTO Ahmad Nassri joins host Allie Howe to discuss how agents’ determination to finish a task can lead them to bypass security controls, and how Socket Firewall changes what they see before an install begins. Nassri describes cases where agents responded to blocked installs by fetching package tarballs directly from a CDN, overriding…

Socket
He Built This City

He Built This City

I visited the Museum of the City of New York today and got to see He Built This City: Joe Macken’s Model, the 50 x27 feet model of the city built over a 21 year period from balsa wood and cardboard. It exceeded my already high expectations. The exhibition closes on 12th October so you should absolutely make a priority to see it if you get the chance. Tags: museums, new-york

Simon Willison's Weblog
Community Corner Podcast: Pop PHP with Nick Sagona

Community Corner Podcast: Pop PHP with Nick Sagona

In this episode, Scott talks to Nick Sagona about Pop PHP, a PHP framework that removes the “magic” so your code is easier to understand and maintain. Links: Our Discord – https://discord.gg/aMTxunVx Buy our shirts – https://store.phparch.com/products/community-corner-podcast-t-shirt Nick’s Links: X – https://x.com/popphpframework https://www.popphp.org/ Scott’s Links: Website – https://scott.keck-warren.com/ Bluesky – https://bsky.app/profile/scottkeckwarren.bsky.social LinkedIn –…

PHP Architect
Esc