Belfast, Northern Ireland, 2 June, 2026 - Cloudsmith, the universal artifact management platform trusted by the world's leading enterprises, today announced the appointment of Mark O'Connor as Chief Financial Officer and Dan Lascell as General Counsel, strengthening the executive leadership team as the firm wins an increasingly large share of its market.
More enterprises now depend on Cloudsmith to secure and govern their software supply chains. The appointments reflect the company's scale as Fortune 500 and Global 2000 customers are selecting Cloudsmith as their trusted partner.
O'Connor had served as an advisor to Cloudsmith's finance organisation through its last three venture financings, including last month’s $72m Series C. Lascell had also served in an advisory role, helping build the company’s legal and governance infrastructure.
O'Connor brings deep experience leading high-growth SaaS businesses through venture stage, acquisition, and public markets. He has served as CFO or in senior finance roles at Bugcrowd, Tenfold, Appirio, Nuance Communications, and BeVocal. O’Connor’s deep institutional knowledge will help Cloudsmith establish financial and procurement controls suitable for an IPO-scale company.
"Our focus is on building Cloudsmith’s infrastructure for longevity," said Mark O'Connor, Chief Financial Officer, Cloudsmith. "That means ensuring our financial controls and commercial rigor are up to audit-ready standards, while enabling our customer-facing teams to move fast and lead the market. That combination means customers can trust Cloudsmith as a mission-critical infrastructure partner."
Lascell brings extensive experience across technology and security companies, with legal leadership roles at Appirio, Bugcrowd, Tercera, AmberPoint, and webMethods. His background in corporate development and international expansion, combined with knowledge of Cloudsmith's commercial and compliance posture, provide Lascell with deep institutional context. He will lead legal, compliance, and commercial contracting, focusing on enterprise procurement and internal governance.
"Cloudsmith's platform is built on trust, providing secure artifacts, provable provenance, and policy-driven governance. Our internal legal and compliance posture reflect that same commitment," said Dan Lascell, General Counsel, Cloudsmith. "Our job is to scale the legal and risk frameworks to ensure Cloudsmith is a dependable long-term partner for large enterprise customers with complex regulatory and legal obligations."
"Mark and Dan are important additions to our leadership team," said Glenn Weinstein, Chief Executive Officer, Cloudsmith. "Enterprise customers rely on Cloudsmith as a dependable partner they can trust at every level, including the platform, their commercial relationship with Cloudsmith, and our internal governance. Mark and Dan will help ensure we meet the highest standards for financial rigor and legal credibility."
The appointments follow Cloudsmith's $72M Series C financing from TCV and Insight Partners. Cloudsmith is scaling to meet the needs of the world's largest and most complex software development organizations, offering customers a secure software supply chain with artifact management that is simple by design, secure by default, and cloud-native.
The company's universal artifact management platform serves over 30 formats, delivering secure low-latency distribution from a global package delivery network. Cloudsmith’s customers include many Fortune 500 and Global 2000 organizations.
Cloudsmith is the leading cloud-native, fully managed universal artifact management platform that helps platform engineering, DevOps, and cybersecurity teams control, secure, and distribute software artifacts globally. Supporting over 30 artifact formats — including containers, language packages, OS packages, and AI/ML models — Cloudsmith delivers enterprise-grade features including continuous vulnerability and malware scanning, SBOM generation, cryptographic signing, a policy-as-code engine, and a global package delivery network with intelligent edge caching. Cloudsmith is built for scale, compliance, and automation, enabling customers in banking, fintech, telecom, software, and AI-native industries to modernize their software supply chains with confidence. Cloudsmith is ISO 27001 and SOC 2 certified and trusted by customers worldwide. Learn more at https://www.cloudsmith.com.
Resonance - cloudsmith@resonancecrowd.com
Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI coding agents.
Microsoft has cut off access to dozens of its open source projects hosted on GitHub as it investigates how hackers apparently breached the projects and injected password-stealing malware into the code. According to security firm Cloudsmith and community-driven malware analysis site OpenSourceMalware, which were some of the first to flag the hack, the malware allowed the hackers to steal the users’ passwords and other sensitive credentials when they opened the compromised tools in their AI coding apps.
Cloudsmith Inc., a startup that helps software teams manage application components, has secured $72 million in new funding. The Series C round was led by TCV, which was also the biggest backer of the company’s previous raise last year. Cloudsmith stated in its funding announcement today that the venture fund was joined by other existing investors and Insight Partners. The company’s total outside funding now exceeds $110 million.