JR Weekly Cyber Watch: Supply Chain Threats Accelerate Across Code, Models, and Agents

Research evidence excerpt

JR Weekly Cyber Watch: Supply Chain Threats Accelerate Across Code, Models, and Agents

May 24, 2026

Notable Product Announcements:

Hexa AI GA. This week, Tenable (TENB, OW) announced general availability

of Hexa AI, a new agentic capability in Tenable One that helps automate

vulnerability discovery, prioritization, and remediation. The platform

supports multi-step reasoning, MCP integration for custom agent building,

and automated ticket routing, policy generation, and audit reporting.

Tenable cited Anthropic’s Mythos as accelerating vulnerability discovery

faster than manual workflows can keep up, positioning Hexa AI as the

orchestration layer needed to close the gap. We do not view frontier AI

models as a replacement for traditional exposure management platforms,

which remain essential for validating AI generated findings, contextualizing

risk to the customer’s environment, and prioritizing remediation.

●Read takeaways from Tenable Investor Day here.

Emerging Cyber Innovation:

Socket. Socket (private), a software supply chain security platform, raised

$60M in Series C funding led by Thrive Capital at a $1B valuation,

bringing total funding to $125M. The platform uses AI-assisted analysis to

detect malicious open-source dependencies before they reach developer

environments. Socket is expanding coverage beyond traditional package

registries into browser extensions, code editor extensions, AI tools, and

MCP servers, reflecting the broadening attack surface highlighted by recent

Shai-Hulud attacks. The unicorn valuation underscores investor conviction

that supply chain security is a durable, standalone category rather than a

feature absorbed by larger platforms.

Top Picks Spotlight:

This week, we highlight CrowdStrike (CRWD, OW), which we believe