Welcome to the latest edition of The Week in Security, which brings you the newest headlines from both the world and our team across the full stack of security: Application security, cybersecurity, and beyond.
In a recent survey, 300 IT and software pros were asked about the state of software supply chain security. Here are takeaways from a webinar discussion.
John Jackson and his Sakura Samurai crew took India up on an invitation to test the security of government websites and apps. Here are the lessons learned.
The Python repo was flooded with malicious typo-squatting packages. Weekend warriors quit defense and hit pause.
The cost of attacks on software supply chains could exceed $80.6B by 2026, a 76% increase over the $45.8B expected in 2023, a market research firm finds.
ReversingLabs researchers discovered two malicious packages that contained TurkoRat, an open source infostealer that lurked on npm for two months before being detected.
Welcome to the latest edition of The Week in Security, which brings you the newest headlines from both the world and our team across the full stack of security: application security, cybersecurity, and beyond.
Learn how ReversingLabs threat intelligence indicator feeds can enhance Microsoft Sentinel. Plus, get a free trial of Early Detection of Ransomware for Sentinel.
Stolen keys allow bootkits to avoid Intel’s “Guard” features. And there’s no way to revoke them.
The path to success for SBOMs faces many hurdles. Here are key factors that threaten your investments.
Quantum, once a popular ransomware gang, is no longer an active threat. However, ReversingLabs researchers created detection rules for a debugger evasion recently added to the Malware Behavior Catalog as Exception Flooding.
ReversingLabs Software Supply Chain Security will be paired with Synopsys to spot malware and tampering in commercial, third-party, and open-source software.
...
In this ConversingLabs Cafe interview, Josh Corman, founder of I Am The Cavalry, talks about what’s behind industry skepticism around SBOMs.
It takes a village... Researchers play capture the flag to find vulns in tools like ChatGPT — with a White House assist.