AI technical debt: What it is — and why it matters
AI platforms exacerbate existing security risks. Here’s what you need to know to stay out of technical debt.
AI technical debt: What it is — and why it matters
Unpacking the packer ‘pkr_mtsi’
This RL Researcher’s Notebook highlights the packer’s evolution — and offers a YARA rule to detect all versions.
SF² aims to help you scale SecOps wisely
The Software Factory Security Framework eyes scaling SecOps as a resource problem — not just head count.
AI is upending file security. Here’s how to fight back
As attacks become AI-optimized and internal AI use rises, enterprises need to modernize their file security strategy.
OWASP tackles AI risk in bold new push
The Open Worldwide Application Security Project now includes an Agentic Top 10, an AI testing guide, and an AI vulnerability scoring tool.
NuGet malware targets Nethereum tools
Highlighting an alarming trend, RL has discovered malicious packages targeting crypto wallets and OAuth tokens to steal funds.
Leveraging Spectra Assure and EDR to Mitigate Third-Party Software Risk
Here’s how to create a compensating control in Crowdstrike to mitigate specific risks in a commercial software package.
NDAA puts AI cyber risk in the crosshairs
What does the future of AI security look like? The latest National Defense Authorization Act gives us a glimpse.
VS Code extensions contain trojan-laden image
RL researchers have identified 19 malicious extensions on the VS Code Marketplace — the majority containing a malicious file posing as a PNG.
New Shai-hulud worm spreads: What to know
Shai-hulud 2.0 malware has spread to 795 npm packages — and been downloaded more than 100M times.
5 ways AI will transform the SOC
AI will reshape SecOps by tackling alert fatigue and streamlining workflows, for starters. Here’s what to expect.
Security frameworks fail on supply chain risk
Researchers studied how well the top frameworks mitigate modern attack techniques. They found serious security gaps.
Why AI and cloud-native are security game-changers
Yesterday's security practices can't tackle today's risks, a new CSA guide notes — making updating tooling essential.
RL Threat Intelligence: Context Changes Everything
Learn how the ReversingLabs Browser Extension operationalizes RL threat intelligence cloud in powerful ways.
Bootstrap script exposes PyPI to domain takeovers
Proving the road to takeover is paved with setuptools alternatives, the script for a popular Python package for building and installing PyPI packages leaves them vulnerable.