Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks

In February 2026, Socket.dev published research on a multi-stage npm supply chain worm operating under the internal flag SANDWORM_MODE. The campaign spanned 19 malicious packages in total across two unique publisher aliases and demonstrated a new class of supply chain attacks that targeted AI-augmented development workflows.

Delegated authority, running locally: Give an agent on your machine an identity you can trust

Part 3 of our agent-identity series: a reference architecture showing how a locally running AI agent, like the coding assistant in your editor or the copilot in your browser, can borrow a human's authority in a scoped, short-lived, auditable way, anchored in an app the user already trusts.

TITAN AI Demo Series: Security Events in TITAN Secure - From Fragmented Threat Data to One Live Feed

Threat data lives everywhere: news outlets, hacker forums, breach reports. Correlating all of it to your vendor ecosystem by hand costs precious response time. SecurityScorecard's new Security Events feature inside TITAN Secure automates that mapping. It turns fragmented signals into a live feed showing exactly who's affected, what happened, and when. Event tags separate confirmed compromises from unverified hacker chatter Status badges show whether an event is active or still under investigation Impact summaries surface how many vendors are confirmed or potentially affected.

80% of New Code is AI-Generated - But 40-50% Has Vulnerabilities Find out Why

Is your organization generating up to 80% of its new code with AI? You might be proud of the speed — but are you ready for the security risks? In this video, we reveal the hidden danger: multiple studies show that **40-50% of AI-generated code changes contain vulnerabilities**. Discover why AI coding is accelerating development faster than ever — and why traditional security approaches are no longer enough.

AI hacking makes password spraying faster. Here's how to close the gap

AI hacking tools are compressing the time between finding a target and logging in as them. Password spraying, already responsible for the vast majority of identity attacks, is the technique benefiting most. Attackers use AI hacking methods to optimize timing, rotate infrastructure, and personalize lures at a scale no human operator could match manually.

What Evidence Will Regulators Expect Under NIS2?

Being NIS2-ready is not just about implementing cybersecurity controls—you should also be prepared to demonstrate that appropriate cybersecurity risk-management measures are actually in place. In this video, we cover some of the key documentation and evidence organizations may need to maintain, including: Security policies and cybersecurity governance documentation Cybersecurity risk assessments and risk-management processes Incident response procedures Business continuity and crisis management plans Supply chain security practices Employee cybersecurity awareness and training activities.