@ApiiroSecurity Secure your agentic development
New York
Joined November 2014
- Tweets777
- Following274
- Followers993
- Likes1.2K
Pinned Tweet
Thanks @bcherny for taking our research team’s findings at @ApiiroSecurity seriously and focusing on prevention...
“We are looking into what we can do to prevent this.”
That’s true leadership!
The coding agents are the new perimeter.
news.ycombinator.com/item?id…
🚨 “𝗗𝗼𝗻’𝘁 𝗮𝘀𝗸 𝗮𝗴𝗮𝗶𝗻” can save the full command in Claude Code’s settings, credentials included. If the file gets committed, the secrets go with it.
🔍 We found 𝟮,𝟱𝟯𝟵 distinct secrets across 𝟭,𝟵𝟵𝟰 public GitHub repos.
🔗 apiiro.com/blog/coding-agent…
To all our customers: @ApiiroSecurity Guardian Prevent was designed to address this exact risk. We prevent secret exposure at the intent (design), prompt, and pre-commit stages.
I'm proud of the research team at @ApiiroSecurity. Thanks @TheHackersNews
The coding agent is the new perimeter
‼️ Claude Code's "Don't Ask Again" option can save passwords and API keys in plaintext.
Apiiro found 2,539 exposed secrets across 1,994 public GitHub repos, including database credentials, SSH logins, and cloud keys.
Deleting files doesn't erase Git history.
Read: thehackernews.com/2026/11/cl…
Using coding agents? Check your @github repos for exposed secrets👇
𝗖𝗼𝗱𝗶𝗻𝗴 𝗮𝗴𝗲𝗻𝘁𝘀 𝗮𝗿𝗲 𝘁𝗵𝗲 𝗻𝗲𝘄 𝗽𝗲𝗿𝗶𝗺𝗲𝘁𝗲𝗿.
🚨 “𝗗𝗼𝗻’𝘁 𝗮𝘀𝗸 𝗮𝗴𝗮𝗶𝗻” can save the full command in Claude Code’s settings, credentials included. If the file gets committed, the secrets go with it.
🔍 We found 𝟮,𝟱𝟯𝟵 distinct secrets across 𝟭,𝟵𝟵𝟰 public GitHub repos.
🔗 apiiro.com/blog/coding-agent…
🚨 @claudeai Mythos 5 submitted malicious code to @github.
It used fake id to pressure maintainers into accepting the change. A dev warned the maintainers. They rejected the change.
To protect coding agents you need deep context from code to runtime.
👇
anthropic.com/research/align…
🚨 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 hiding in a photo. Inside an npm package.
@ApiiroSecurity uncovered 𝗗𝗮𝗿𝗸𝗿𝗼𝗼𝗺, a campaign spanning 𝟭𝟵 𝗻𝗽𝗺 𝗱𝗼𝘁𝗲𝗻𝘃 𝗹𝗼𝗼𝗸-𝗮𝗹𝗶𝗸𝗲𝘀 distributed through fake GitHub exploit repos.
🔍 Full research 👇
lnkd.in/drqXJfyD
The AI race won’t stop. Security must keep up
Coding agents are the new perimeter. They can’t be solely responsible for securing and governing themselves
Enterprises need an independent security control plane with deterministic guardrails across multi-coding agent and multi-model
Apiiro Named a Leader in the @Gartner_inc Magic Quadrant™ for Software Supply Chain Security 🚀 apiiro.com/blog/apiiro-named…
Idan Plotnik retweeted
As a payments infrastructure provider, @PaddleHQ can’t just float along when it comes to application security. 🚣
They turned to Apiiro to streamline collaboration with developers and propel their #AppSec program forward, enabling them to...
🚀 Maintain visibility of Paddle’s entire application estate, including every code change across 100+ pull requests per week.
⏳ Give them back 2 days' worth of work each week by automating risk assessments and enforcing policies directly in developers' workflows.
📦 Consolidate their security testing tooling with a unified platform across open source, software supply chain, and secrets security.
📊 Measure the impact their AppSec program has on both security efficiency and engineering productivity metrics.
Read the full story: apiiro.com/resource/paddle-c…
Idan Plotnik retweeted
We sat down with Adam Jordan (@XYLAMIC), Distinguished Engineer & Head of Secure, Sustainable Software at Shell, to talk about how Shell…
🤖 Enables autonomy to deliver secure software
💪 Defines strong security controls and automation
📈 Measures and articulates #AppSec success
Watch the full interview with @idanplotnik 👇
apiiro.com/resource/adam-jor…
✅ Checklist for evaluating, implementing & operationalizing an Application Security Posture Management (#ASPM).
Spoiler 🛑 Not all ASPMs are created equal. ⚖️
apiiro.com/resource/applicat…
#appsec #devsecops #RiskManagement #supplychain
Idan Plotnik retweeted
“Look how many I killed with my own hands! Your son killed Jews!”
Listen to a phone call of a Hamas terrorist calling home, bragging about how many people he massacred.
The whole world needs to hear this.
Idan Plotnik retweeted
Hi @BlackHatEvents - I was shocked to discover that one of your Cyber Security Trainer and Review Board Members is also an antisemitic, a terror supporter who publicly denies Hamas Terror acts. Please remove @Voulnet from his role immediately!
Idan Plotnik retweeted
Hi UN Secretary General @antonioguterres. Did this place also not happen in a vacuum? Asking for 6 million friends …
Idan Plotnik retweeted
לא יודע מי הפיק את הסרטון הזה אבל הוא בהחלט חזק!
וכמו המסר שהעברתי כבר שנים, זה הפתרון: צה"ל חייב לדבר ערבית!
