Microsoft disables Excel, Office macros by default. Will it matter?

ReversingLabs data shows that attachments that use decades-old scripting languages like XLM and VBA are often malicious. Still, Microsoft’s move to harden Excel and other Office apps may not move the security needle.

After Russian arrests, REvil ransomware implants persist

Almost two weeks after Russian authorities claimed to have dismantled the REvil ransomware group with a string of arrests, evidence for a reduction in the availability of REvil implants has yet to appear.

Here’s what happened with Log4Shell while you were out

A look back at 2021: The year ransomware took the gloves off

We came into 2021 well aware of the risks ransomware posed. Even that didn’t prepare us for what was to come, as ransomware gangs and nation states launched attacks on critical infrastructure with cyber-physical consequences

A look back at 2021: The year supply chain threats went mainstream

Ransomware may have grabbed most of the headlines, but history will remember 2021 as the year that governments and companies finally woke up to the lurking threat posed by vulnerable software supply chains

Log4j: Why your organization needs to embrace software bills of materials

This widespread vulnerability is an object lesson for why software development organizations and their customers should be using SBOMs.

Get smart: Leverage threat intel to detect ransomware

Operationalizing high fidelity threat intelligence can help your organization short circuit emerging ransomware attacks. Here’s how.

Expanding Security Visibility To Reduce Software Supply Chain Risk

No doubt about it, the way malicious actors attack their targets through software is changing.

3 Reasons for Appsec Folks to be Excited About ReversingLabs

Find hidden software risks and prevent supply chain attacks

Crosspoint Capital Invests in ReversingLabs to Scale Supply Chain Security Offerings

It’s with tremendous excitement that I’m able to speak to our customers, partners and employees about the recent investment in ReversingLabs led by Crosspoint Capital Partners.

Groundhog day: NPM package caught stealing browser passwords

This blog discusses the process used to find another NPM package that steals saved Chrome browser passwords.

Data Exfiltrator

A New Tactic for Ransomware Adversaries

Third-party code comes with some baggage

Recognizing risks introduced by statically linked third-party libraries

ReversingLabs SDK for Python

Extend Your Integrations and Enrich Your Workflows Using Python

ReversingLabs Launches Managed Software Assurance Program

The rise of software supply chain attacks, with SolarWinds SunBurst being the most notable, has elevated this issue with every board of directors for every company that’s producing or accepting software.