Ross Hosman

Congratulations to Beacon Security on coming out of stealth and closing a $13M seed round. Beacon is building the runtime for agentic security, giving CISOs and their teams a real way to run AI agents in their own environment with the context and guardrails needed to trust them. That's exactly the kind of problem our community of security leaders is thinking hardest about right now. Excited to watch Gal Tal-Hochberg, Or Mattatia, Iddo Israely and the team help the industry move toward agent-led security operations. https://lnkd.in/dVApq9Eb

We are hiring! This is a great opportunity to join the team helping drive cybersecurity innovation at JPMorganChase and across the ecosystem. Please apply and share with your networks if interested.

🚨 Active supply chain attack on TanStack. 84 npm packages in the @tanstack namespace have been compromised with a credential-stealing worm. @tanstack/react-router alone has 12M+ weekly downloads. The affected packages span react-router, solid-router, vue-router, start, and dozens more across the TanStack ecosystem. Additional compromised packages were also found in the @uipath namespace and several other organizations. Socket flagged every malicious version within six minutes of publication. Here's what the malware does: • Injects a 2.3 MB obfuscated file (router_init.js) that daemonizes itself on install, detaching from the terminal so nothing looks wrong • Harvests credentials from GitHub Actions (including OIDC tokens), AWS (IMDSv2, Secrets Manager, SSM across multiple regions), HashiCorp Vault, and Kubernetes service accounts • Uses stolen OIDC tokens to autonomously republish itself to npm under the compromised maintainer's identity, turning every infected CI pipeline into a new propagation vector • Writes persistence hooks into .claude/ and .vscode/ directories so it survives across reboots and re-executes when developers use Claude Code or open VS Code • Exfiltrates everything through the Session decentralized P2P network, making C2 traffic nearly indistinguishable from encrypted messaging • Commits copies of itself to maintainer repositories via GitHub's GraphQL API, spoofing the author as claude@users.noreply.github.com to blend in with legitimate Claude Code activity • Generates valid Sigstore provenance attestations for the malicious packages, meaning provenance badges alone cannot be trusted as a security signal The attack vector: an orphaned commit (no parent history) in the TanStack/router repo was used to hijack the CI workflow's OIDC token, bypassing existing publishing protections including 2FA. The commit was authored by the account "voicproducoes," whose repos include projects named "A Mini Shai-Hulud has Appeared," linking this to an ongoing campaign Socket has been tracking. TanStack maintainer Tanner Linsley confirmed the attack and the team is unpublishing compromised versions and shutting down publishing pipelines while they remediate. What to do right now: • Check your dependency tree for router_init.js. SHA256: ab4fcadaec49c03278063dd269ea5eef82d24f2124a8e15d7b90f2fa8601266c • Rotate npm tokens, GitHub PATs, AWS credentials, Vault tokens, and K8s service account tokens on any system that installed an affected version • Audit .claude/ and .vscode/ directories for router_runtime.js, setup.mjs, or unfamiliar hooks • Check git log for commits authored by claude@users.noreply.github.com that weren't initiated through the legitimate Claude Code app • Block egress to filev2.getsession[.]org at the DNS level • Do not trust Sigstore provenance badges alone Full list of affected packages and IOCs: https://lnkd.in/ebHPUSE4 Developing story...

RSA week is always a whirlwind, but hosting our SVCI Celebration was a true highlight. What started 6 years ago in a small room has grown into a community of 70+ highly active CISOs, all committed to shaping the future of cybersecurity by supporting the next generation of founders. We’ve backed 20+ startups that have earned the trust and scrutiny of some of the best security leaders in the world. We are grateful to everyone who showed up, contributed, and continues to make this community so special. And a big thank you to our partners Notable Capital and Chime for hosting, and the incredible founders building real signal in all the noise. Let’s go!