Tom

D&R

[Tom @tom3fitzgerald]

fake ai leading to infostealer https://t.co/fAu77llW1n

[Tom @tom3fitzgerald]

New role for a Security Operation manager here at @figma that is remote friendly. This is a new team with a fun mission focused on operations that moves fast but not in a chaotic bad way. https://t.co/vAQSPEB3mW

[Figma @figma]

?

[Tom @tom3fitzgerald]

this is honestly really cool

[Amy Lima @amylimabean]

I've been quietly living the dream behind the scenes supporting this launch and the most brilliant team in the game.

Introducing Figma agent: an design agent fluent in Figma, right on your canvas.

✨✨✨✨

[Figma @figma]

wdym of course there’s an agent right on the design canvas that’s fluent in Figma and native to the way your team works

[Dylan Field @zoink]

Quick update: not dead.

$FIG Q1 results:

→ 46% YoY revenue growth, accelerating for the 2nd straight quarter
→ Net Dollar Retention Rate increased to 139%, our highest rate in over two years
→ Raising 2026 revenue guidance for the year

Design matters more than ever.

[Tom @tom3fitzgerald]

The Config 2026 agenda is live and virtual registration is open and free for everyone globally. Register to tune in to this year’s sessions. https://t.co/15W76nvMjA

[Tom @tom3fitzgerald]

#infosec is hiring at @figma! We have a world class security team here with a great mission and remote work! Hiring Security Engineers. DM

[Tom @tom3fitzgerald]

#Figma Security is hiring across the board! Help protect @figma and our users! DMs open ✨

[Tom @tom3fitzgerald]

The goal: help folks move fast without losing data protections.

Enterprise enforcement via MDM should be table stakes. Where it’s missing, layer in lightweight detection and alerting.

More to share on our automation platform soon.

[Tom @tom3fitzgerald]

Security teams: If your company uses AI coding tools, you’ll want to ensure folks are signed in with enterprise-managed accounts so their data stays covered under your enterprise agreement.

Start with vendor-supported enterprise controls wherever they exist. 🧵

[Tom @tom3fitzgerald]

For Copilot in VS Code, inspect local chat session data:

"/Users/$USER/Library/Application Support/Code/User/workspaceStorage/*/chatSessions"

Check the `requesterUsername` field in the JSON and ensure it’s tied to a managed GitHub Enterprise account.

[Tom @tom3fitzgerald]

@rvivek friendly ping

[Tom @tom3fitzgerald]

@rvivek straight to prod pls