How RL mapped a Midnight Blizzard-linked campaign from two hashes
ReversingLabs expanded the published hashes into a staging server, five stagers, two lure files and the domain-to-server links.
How RL mapped a Midnight Blizzard-linked campaign from two hashes
The Next MOVEit May Already Be in Your File Transfer Queue
MFT and other trusted systems collect files, access and connections. Patching and inspecting what moves through it are separate defenses.
-1400x732.jpg&w=3840&q=75)
What a CBOM Is — and Why an SBOM Won't Answer the Quantum Question
Post-quantum readiness depends on knowing where cryptography lives in the software you run, and a list of components can't tell you that.
AI coding agents expose developer screenshots on GitHub repos
PixelLeak exposures included many sensitive documents, highlighting why inventories of what agents can reach and publish are needed.
What RL Found Before Anthropic’s Midnight Blizzard Report
ReversingLabs identified and classified the malware weeks before the report was published — showing why behavioral intelligence and historical telemetry matter in the AI age.
CRA compliance will be judged by the binary you ship
With the EU Cyber Resilience Act’s Article 14 reporting requirements now live, executives need evidence drawn from the final software artifact.
Dependency installation security measure already defeated on npm
New btree malware bypasses the install script, negating the popular repo's measure barely two months after adoption.
Why the smartest LLMs are not-so-smart pen testers
A new benchmark of eight leading AI systems shows that an intelligent model still needs a good context-rich harness.
Restrospective: How Malicious Updates Poison Your Environment
This post-mortem on recent supply chain attacks and threat actors including S1ngularity, Shai-Hulud and TeamPCP can help you prepare for what comes next.
Can advanced math make AI systems safer?
Top mathematicians are hoping advanced mathematics and cryptographic techniques will help verify AI agents’ actions and claims.
AI changes cyber spending — but where’s the line item for tokens?
Organizations’ cyber dollars are shifting, not growing. But AI compute costs can spiral — and that is why context matters in your agentic SOC.
Malicious npm campaign targets developers integrating Twilio
The package poses as a security tool targeting developers looking to implement Internet-based apps with telecom networks.
Agentic AI permissions: A core problem — but not the only one
Controlling coding agent overpermissioning is key to security. But recent frontier AI incidents show that problems don’t stop there.
Memory-safe programming goes from advocacy to adoption
The coding languages shift — fueled by Microsoft, Google, and Amazon and enabled by AI coding — is driven by the quest for secure software.
AI coding puts Secure by Design in the spotlight
The software industry is entering the AI era burdened by legacy flaws and weaknesses, making Secure by Design essential.