GitHub breach: The development ecosystem is in the hot seat
This TeamPCP attack is a serious wakeup call about software supply chain security — and the problems with implicit trust.
GitHub breach: The development ecosystem is in the hot seat
AI agents are the new insider threat
AI security leader and author Steve Wilson explains why you need to rethink security — and treat AI agents as digital workers.
Hackers Abuse Parental Controls to Hijack Google Accounts
Learn how attackers are re-casting adults as minors to bypass recovery and lock users out.
Spectra Analyze, Spectra Core Update: Deeper Detection, Smarter Analysis
RL threat detection and binary analysis can now close the gap for threat hunters.
Shai-Hulud code drop: It’s open season for attacks
The npm malware's public release provides a ready-made blueprint for threat actors. Take action on supply chain security.
RL Joins NATO Locked Shields Cyber Event: 3 Takeaways
ReversingLabs joined defensive teams with its malware analysis platform. Here are key lessons.
Think AI agents are risky? Your underlying stack is too
To manage agentic AI risk, organizations need to focus more on the infrastructure they run on.
Mini Shai-Hulud tears at OSS trust
This latest compromises of popular and infrastructure-level npm packages are rocking the foundations open source.
How Dirty Frag rose from the Copy Fail exploit
RL documented 163 samples of the Linux exploit's new variants, active malware — and developed YARA rules.
Selective NVD enrichment: Why it matters
AI vulnerability reporting is overwhelming teams — and NIST. But for AppSec, scaling back analysis is cause for alarm.
Spectra Analyze in Action: Retrohunting Bots
Learn how to use ReversingLabs’ Spectra Analyze to expand your detection of malicious Telegram C2 bots.
How Mythos changes the AppSec calculus
Here are the facts on Claude Mythos — and why a layered application security framework is essential.
Copy Fail Flaw: 5 YARA Rules for Detection
Here’s what you need to know about the Linux kernel privilege escalation — and how to use YARA rules to get on top of it.
How agentic AI flips the trust model
As AppSec shifts focus from the components to data, your strategy needs updating. Are you on top of your trust debt?
Claude adds malware to crypto agent
PromptMink has evolved into a malicious dependency in a package that allows access to crypto wallets and funds.