The growing number of software supply chain attacks is putting pressure on validation of software integrity and authenticity.
Read More about Go below the surface on tampering: The trouble with software integrity validation
Python packages can contain sensitive information. Here's how software development teams can keep secrets secret
Read More about It’s not a secret if you publish it on PyPI
Package repository content can be different from source code repository content. Here's what your software team needs to know.
Read More about Coinminer and npm: What you see is not always what you get
Software supply chain attacks are a top concern. But tools for monitoring and stopping them lags. Meet ReversingLabs' new platform: secure.software.
Read More about Software supply chain risk demands our attention
Chief Information Security Officers from energy, finance, and retail sectors reflect on new security challenges–and CISO burnout.
Read More about Pandemic paradigm shift: CISOs say remote workforce a game-changer, leading to burnout
ReversingLabs’ team of threat analysts have released new YARA detection rules for malware wipers discovered targeting Ukraine. We break them down for you here.
Read More about From the Labs: YARA Rule for Detecting Malware Wipers
One year ago today, the White House released an executive order regarding improving the nation’s cybersecurity (a.k.a. EO 14028). Here's where things stand.
Read More about Happy anniversary? An assessment of the Cybersecurity EO one year on
Research by ReversingLabs suggests that dependency confusion attacks on npm repositories have been used to compromise German firms - exposing an apparent red team exercise.
Read More about Update: NPM dependency confusion hacks target German firms
The Emotet malware is back just months after a highly publicized take-down. Dragan Damjanovic of KPMG and Dado Horvat, a Senior Threat Analyst at ReversingLabs, talk about how to keep your organization safe.
Read More about Emotet's back. Here's how to keep from getting hacked
The resurgence of the Conti ransomware group in the face of leaks and takedowns is worth paying attention to -and a signal of trouble ahead for enterprises
Read More about Conti pivots as ransomware as a service struggles
The importance of generating SBOM data for responding to newly reported vulnerabilities and software supply chain attacks only grows.
Read More about Not all SBOMs Are the Same. Choose Wisely!
The U.S. is raising the bar for secure software. Listen as ReversingLabs Chief Software Architect talks about what's in NIST's new Secure Software Development Framework guidance and software bills of material (SBOMs), and what they mean for your software development organization.
Read More about Interview: Tomislav Peričin Explains NIST’s New Secure Software Development Framework
Ukrainian organizations have been targeted by hundreds of attacks in recent weeks, including two new examples of destructive wiper malware. We take a closer look at HermeticWiper and IsaacWiper.
Read More about Wiper malware targeting Ukraine: Evidence of planning, and haste
Early Stage Ransomware Intelligence is crucial to preventing ransomware attacks before they happen.
Read More about Ransomware Intelligence that Drives Operations
The government’s standards body issued guidelines for secure development, asking firms selling to the government to implement a software bill of materials.
Read More about NIST raises the bar for federal software supply chain with call for SBOMs