Why governance is key to safe AI adoption
A new CSA report stresses getting out in front of AI risk — and why it matters for SecOps.
Why governance is key to safe AI adoption
Shai-hulud post-mortem: A call to action on AppSec
Trigger.dev's experience shows that you need modern controls to combat today's supply chain attacks.
Adversarial AI is on the rise: What you need to know
Researchers explain that as threat actors move to AI-enabled malware in active operations, existing defenses will fail.
How supply chain risk can affect cyber insurance
Gaining visibility into supply chain threats — and adding controls for software risk — are essential to insurability.
AI technical debt: What it is — and why it matters
AI platforms exacerbate existing security risks. Here’s what you need to know to stay out of technical debt.
Unpacking the packer ‘pkr_mtsi’
This RL Researcher’s Notebook highlights the packer’s evolution — and offers a YARA rule to detect all versions.
SF² aims to help you scale SecOps wisely
The Software Factory Security Framework eyes scaling SecOps as a resource problem — not just head count.
AI is upending file security. Here’s how to fight back
As attacks become AI-optimized and internal AI use rises, enterprises need to modernize their file security strategy.
OWASP tackles AI risk in bold new push
The Open Worldwide Application Security Project now includes an Agentic Top 10, an AI testing guide, and an AI vulnerability scoring tool.
NuGet malware targets Nethereum tools
Highlighting an alarming trend, RL has discovered malicious packages targeting crypto wallets and OAuth tokens to steal funds.
Leveraging Spectra Assure and EDR to Mitigate Third-Party Software Risk
Here’s how to create a compensating control in Crowdstrike to mitigate specific risks in a commercial software package.
NDAA puts AI cyber risk in the crosshairs
What does the future of AI security look like? The latest National Defense Authorization Act gives us a glimpse.
VS Code extensions contain trojan-laden image
RL researchers have identified 19 malicious extensions on the VS Code Marketplace — the majority containing a malicious file posing as a PNG.
New Shai-hulud worm spreads: What to know
Shai-hulud 2.0 malware has spread to 795 npm packages — and been downloaded more than 100M times.
5 ways AI will transform the SOC
AI will reshape SecOps by tackling alert fatigue and streamlining workflows, for starters. Here’s what to expect.