Ransomware Intelligence that Drives Operations
Early Stage Ransomware Intelligence is crucial to preventing ransomware attacks before they happen.
Ransomware Intelligence that Drives Operations
NIST raises the bar for federal software supply chain with call for SBOMs
The government’s standards body issued guidelines for secure development, asking firms selling to the government to implement a software bill of materials.
Microsoft disables Excel, Office macros by default. Will it matter?
ReversingLabs data shows that attachments that use decades-old scripting languages like XLM and VBA are often malicious. Still, Microsoft’s move to harden Excel and other Office apps may not move the security needle.
After Russian arrests, REvil ransomware implants persist
Almost two weeks after Russian authorities claimed to have dismantled the REvil ransomware group with a string of arrests, evidence for a reduction in the availability of REvil implants has yet to appear.
Here’s what happened with Log4Shell while you were out
A look back at 2021: The year ransomware took the gloves off
We came into 2021 well aware of the risks ransomware posed. Even that didn’t prepare us for what was to come, as ransomware gangs and nation states launched attacks on critical infrastructure with cyber-physical consequences
A look back at 2021: The year supply chain threats went mainstream
Ransomware may have grabbed most of the headlines, but history will remember 2021 as the year that governments and companies finally woke up to the lurking threat posed by vulnerable software supply chains
Log4j: Why your organization needs to embrace software bills of materials
This widespread vulnerability is an object lesson for why software development organizations and their customers should be using SBOMs.
Get smart: Leverage threat intel to detect ransomware
Operationalizing high fidelity threat intelligence can help your organization short circuit emerging ransomware attacks. Here’s how.
Expanding Security Visibility To Reduce Software Supply Chain Risk
No doubt about it, the way malicious actors attack their targets through software is changing.
3 Reasons for Appsec Folks to be Excited About ReversingLabs
Find hidden software risks and prevent supply chain attacks
Crosspoint Capital Invests in ReversingLabs to Scale Supply Chain Security Offerings
It’s with tremendous excitement that I’m able to speak to our customers, partners and employees about the recent investment in ReversingLabs led by Crosspoint Capital Partners.
Groundhog day: NPM package caught stealing browser passwords
This blog discusses the process used to find another NPM package that steals saved Chrome browser passwords.
Third-party code comes with some baggage
Recognizing risks introduced by statically linked third-party libraries