<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>ReversingLabs Blog</title>
    <link>https://www.reversinglabs.com/blog</link>
    <description>Latest blog posts from ReversingLabs</description>
    <language>en-US</language>
    <pubDate>Wed, 22 Jul 2026 01:36:20 GMT</pubDate>
    <dc:date>2026-07-22T01:36:20.532Z</dc:date>
    <dc:language>en</dc:language>
    <lastBuildDate>Wed, 22 Jul 2026 01:36:20 GMT</lastBuildDate>
    <atom:link href="https://www.reversinglabs.com/blog/rss.xml" rel="self" type="application/rss+xml" />
    
    <item>
      <title><![CDATA[Hidden in plain sight: How SVGs carry malicious scripts]]></title>
      <link>https://www.reversinglabs.com/blog/how-svgs-carry-dangerous-scripts</link>
      <guid>https://www.reversinglabs.com/blog/how-svgs-carry-dangerous-scripts</guid>
      <pubDate>Tue, 21 Jul 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-07-21T15:00:00.000Z</dc:date>
      <description><![CDATA[SVGs are difficult to detect, can be snuck into content — and can do malicious and legitimate actions. Here's how malicious SVGs work.]]></description>
      <dc:creator><![CDATA[Zaria Vuksan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Reasearchers-Notebook-SVG.webp" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[ClickFix doesn't attack your knowledge. It attacks your trust.]]></title>
      <link>https://www.reversinglabs.com/blog/clickfix-attacks-your-trust</link>
      <guid>https://www.reversinglabs.com/blog/clickfix-attacks-your-trust</guid>
      <pubDate>Thu, 16 Jul 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-07-16T15:00:00.000Z</dc:date>
      <description><![CDATA[One of the most effective attack methods I've analyzed this year runs on legitimate tools and willing users — and AV and EDR is blind to it.]]></description>
      <dc:creator><![CDATA[Toni Dujmović]]></dc:creator>
      <author><![CDATA[toni.dujmovic@reversinglabs.com (Toni Dujmović)]]></author>
      <enclosure url="https://www.reversinglabs.com/api/media/file/trust-clickfix.jpg" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[New OWASP tool structures AI threat modeling]]></title>
      <link>https://www.reversinglabs.com/blog/owasp-threat-advisor</link>
      <guid>https://www.reversinglabs.com/blog/owasp-threat-advisor</guid>
      <pubDate>Wed, 15 Jul 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-07-15T15:00:00.000Z</dc:date>
      <description><![CDATA[Threat Advisor could help teams with AI-specific risks. But a broader AppSec strategy rethink is needed in the AI era.]]></description>
      <dc:creator><![CDATA[Jaikumar Vijayan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/ai-threat-advisor-robot.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[The tale of ClickFix: 5 takeaways from RL’s new threat report]]></title>
      <link>https://www.reversinglabs.com/blog/5-takeaways-from-clickfix-threat-report</link>
      <guid>https://www.reversinglabs.com/blog/5-takeaways-from-clickfix-threat-report</guid>
      <pubDate>Tue, 14 Jul 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-07-14T15:00:00.000Z</dc:date>
      <description><![CDATA[New RL research explains why ClickFix attacks are multiplying — and why reliable detection requires going beyond AV and EDR.]]></description>
      <dc:creator><![CDATA[Paul Roberts]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/The-Tale-of-ClickFix-Blog.webp" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[AI-BOM push borrows from the SBOM playbook]]></title>
      <link>https://www.reversinglabs.com/blog/ai-bom-minimum-elements-proposal</link>
      <guid>https://www.reversinglabs.com/blog/ai-bom-minimum-elements-proposal</guid>
      <pubDate>Thu, 09 Jul 2026 16:00:00 GMT</pubDate>
      <dc:date>2026-07-09T16:00:00.000Z</dc:date>
      <description><![CDATA[The Institute for Security and Technology's 'Driving AI Transparency' policy paper makes the case for AI-BOM minimum requirements.]]></description>
      <dc:creator><![CDATA[Ericka Chickowski]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/requirement-ai-bom.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Spectra Analyze in Action: Hunting Device Code Phishing Pages]]></title>
      <link>https://www.reversinglabs.com/blog/device-code-phishing-walkthrough</link>
      <guid>https://www.reversinglabs.com/blog/device-code-phishing-walkthrough</guid>
      <pubDate>Wed, 08 Jul 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-07-08T15:00:00.000Z</dc:date>
      <description><![CDATA[RL recently discovered active Microsoft 365 device code phishing. Here's a walkthrough of how our researchers found the campaign.]]></description>
      <dc:creator><![CDATA[RL Research Team]]></dc:creator>
      <author><![CDATA[content@reversinglabs.com (RL Research Team)]]></author>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Spectra-Analyze-in-Action-Hunting-Device-Code-Phishing-Pages.webp" type="image/jpeg" />
      <category><![CDATA[Products & Technology]]></category>
    </item>
    <item>
      <title><![CDATA[‘Download pumping’ joins the trust-abuse bandwagon]]></title>
      <link>https://www.reversinglabs.com/blog/download-pumping-trust-abuse</link>
      <guid>https://www.reversinglabs.com/blog/download-pumping-trust-abuse</guid>
      <pubDate>Tue, 07 Jul 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-07-07T15:00:00.000Z</dc:date>
      <description><![CDATA[While this repository vector is not new, researchers have uncovered a new twist for exploiting trusted metrics to hide malicious code.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/trust-abuse.jpg" type="image/jpeg" />
      <category><![CDATA[Dev & DevSecOps]]></category>
    </item>
    <item>
      <title><![CDATA[This Report from Gartner Defines the Software Supply Chain Security Market]]></title>
      <link>https://www.reversinglabs.com/blog/gartner-report-defines-sscs-market</link>
      <guid>https://www.reversinglabs.com/blog/gartner-report-defines-sscs-market</guid>
      <pubDate>Thu, 02 Jul 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-07-02T15:00:00.000Z</dc:date>
      <description><![CDATA[Explore the new Gartner® Magic Quadrant™ for software supply chain security and learn why ReversingLabs is recognized. ]]></description>
      <dc:creator><![CDATA[Jasmine Noel]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/This-Report-from-Gartner-Defines-the-Software-Supply-Chain-Security-Market.webp" type="image/jpeg" />
      <category><![CDATA[Products & Technology]]></category>
    </item>
    <item>
      <title><![CDATA[AI use in cybersecurity is on the rise — and so is burnout]]></title>
      <link>https://www.reversinglabs.com/blog/ai-cybersecurity-burnout</link>
      <guid>https://www.reversinglabs.com/blog/ai-cybersecurity-burnout</guid>
      <pubDate>Wed, 01 Jul 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-07-01T15:00:00.000Z</dc:date>
      <description><![CDATA[The Life and Times of Cybersecurity Professionals study highlights a trend that has accelerated as cyber has become more complex.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/burnout-secops-ai.jpg" type="image/jpeg" />
      <category><![CDATA[Security Operations]]></category>
    </item>
    <item>
      <title><![CDATA[2026 Gartner® Magic Quadrant™ for Software Supply Chain Security: 5 takeaways]]></title>
      <link>https://www.reversinglabs.com/blog/5-takeaways-2026-gartner-magic-quadrant-sscs</link>
      <guid>https://www.reversinglabs.com/blog/5-takeaways-2026-gartner-magic-quadrant-sscs</guid>
      <pubDate>Tue, 30 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-30T15:00:00.000Z</dc:date>
      <description><![CDATA[The Magic Quadrant™ for Software Supply Chain Security is a 45-minute read. Here's what we feel security leaders need to pull from it.]]></description>
      <dc:creator><![CDATA[Jasmine Noel]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/mq-five-takeaways.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Software Supply Chain Security Just Got Its Own Magic Quadrant — and RL Is In It   ]]></title>
      <link>https://www.reversinglabs.com/blog/sscs-magic-quadrant-rl-is-on-it</link>
      <guid>https://www.reversinglabs.com/blog/sscs-magic-quadrant-rl-is-on-it</guid>
      <pubDate>Thu, 25 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-25T15:00:00.000Z</dc:date>
      <description><![CDATA[SSCS is a footnote that grew up, moved out, and got its own report. ]]></description>
      <dc:creator><![CDATA[Mario Vuksan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Blog-Gartner-Mario-Vuksan.webp" type="image/jpeg" />
      <category><![CDATA[Products & Technology]]></category>
    </item>
    <item>
      <title><![CDATA[Should frontier AI firms fund OSS ecosystem security?]]></title>
      <link>https://www.reversinglabs.com/blog/frontier-ai-fund-oss-security</link>
      <guid>https://www.reversinglabs.com/blog/frontier-ai-fund-oss-security</guid>
      <pubDate>Wed, 24 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-24T15:00:00.000Z</dc:date>
      <description><![CDATA[With a ‘vulnpocalypse’ expected, AppSec leaders are calling for the companies to invest in a Great Refactor Fund to secure open source.]]></description>
      <dc:creator><![CDATA[Jaikumar Vijayan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/oss-security-funding.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Can AI beat AI? 3 challenges with VulnOps adoption]]></title>
      <link>https://www.reversinglabs.com/blog/3-challenges-ai-driven-vulnops</link>
      <guid>https://www.reversinglabs.com/blog/3-challenges-ai-driven-vulnops</guid>
      <pubDate>Tue, 23 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-23T15:00:00.000Z</dc:date>
      <description><![CDATA[SecOps leaders must tackle cost and risk to deliver autonomous vulnerability operations. But with frontier AI, it's critical.]]></description>
      <dc:creator><![CDATA[Ericka Chickowski]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/rock-em-sock-em-robots.jpg" type="image/jpeg" />
      <category><![CDATA[Security Operations]]></category>
    </item>
    <item>
      <title><![CDATA[Gartner® Named RL a Software Supply Chain Security Visionary. Here’s What We See Coming]]></title>
      <link>https://www.reversinglabs.com/blog/gartner-rl-sscs-visionary-mario-vuksan</link>
      <guid>https://www.reversinglabs.com/blog/gartner-rl-sscs-visionary-mario-vuksan</guid>
      <pubDate>Thu, 18 Jun 2026 16:00:00 GMT</pubDate>
      <dc:date>2026-06-18T16:00:00.000Z</dc:date>
      <description><![CDATA[The first Magic Quadrant™ for Software Supply Chain Security comes as, we feel,  the demand for greater supply chain visibility explodes.]]></description>
      <dc:creator><![CDATA[Mario Vuksan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Blog-Gartner-Mario-Vuksan.webp" type="image/jpeg" />
      <category><![CDATA[Products & Technology]]></category>
    </item>
    <item>
      <title><![CDATA[Agentic AI risk isn't a model problem. It's an architecture problem.]]></title>
      <link>https://www.reversinglabs.com/blog/agentic-ai-risk-architecture-problem</link>
      <guid>https://www.reversinglabs.com/blog/agentic-ai-risk-architecture-problem</guid>
      <pubDate>Thu, 18 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-18T15:00:00.000Z</dc:date>
      <description><![CDATA[Agentic AI is moving the perimeter from components to data — and most strategies aren't built for that.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/agentic-ai-archictecture.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[The race to secure AI coding: 4 steps to rein agents in]]></title>
      <link>https://www.reversinglabs.com/blog/race-to-secure-ai-coding</link>
      <guid>https://www.reversinglabs.com/blog/race-to-secure-ai-coding</guid>
      <pubDate>Wed, 17 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-17T15:00:00.000Z</dc:date>
      <description><![CDATA[Coding agents are privileged insiders — with keys to CI/CD pipelines even as they give rise to ‘slopsquatting.’ Here’s how to govern them.]]></description>
      <dc:creator><![CDATA[Jaikumar Vijayan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/ai-coding-agents.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Update to npm blocks install scripts: What it means for AppSec]]></title>
      <link>https://www.reversinglabs.com/blog/npm-v12-blocks-install-scripts</link>
      <guid>https://www.reversinglabs.com/blog/npm-v12-blocks-install-scripts</guid>
      <pubDate>Tue, 16 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-16T15:00:00.000Z</dc:date>
      <description><![CDATA[Disabling scripts by default closes the vector worms like Shai-Hulud rely on. Here's what the update fixes — and what it doesn't.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Shai-hulud%20worm.png" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Device code phishing bypasses password stealing]]></title>
      <link>https://www.reversinglabs.com/blog/device-code-phishing-campaign</link>
      <guid>https://www.reversinglabs.com/blog/device-code-phishing-campaign</guid>
      <pubDate>Fri, 12 Jun 2026 17:00:00 GMT</pubDate>
      <dc:date>2026-06-12T17:00:00.000Z</dc:date>
      <description><![CDATA[The Microsoft 365 phishing campaign persuades victims to complete a real authentication process that authorizes an attacker-controlled device.]]></description>
      <dc:creator><![CDATA[Robert Simmons]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/device-code-phishing.jpg" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[How to defend ARM64 cloud infrastructure from ITScape]]></title>
      <link>https://www.reversinglabs.com/blog/defend-cloud-infrastructure-itscape</link>
      <guid>https://www.reversinglabs.com/blog/defend-cloud-infrastructure-itscape</guid>
      <pubDate>Thu, 11 Jun 2026 19:00:00 GMT</pubDate>
      <dc:date>2026-06-11T19:00:00.000Z</dc:date>
      <description><![CDATA[RL has documented CVE-2026-46316, and developed two YARA rules to help detect exploits of the multi-tenant cloud vulnerability.]]></description>
      <dc:creator><![CDATA[Robert Simmons]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/cloud-security-itscape.jpg" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[MCP security tracks API's playbook — we know how that ends]]></title>
      <link>https://www.reversinglabs.com/blog/mcp-security-tracks-api-playbook</link>
      <guid>https://www.reversinglabs.com/blog/mcp-security-tracks-api-playbook</guid>
      <pubDate>Thu, 11 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-11T15:00:00.000Z</dc:date>
      <description><![CDATA[The standard connecting AI agents to tools and data leaves security to others. Make it a do-over.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/mcp-api-lessons.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Working with agentic AI: A SecOps survival guide]]></title>
      <link>https://www.reversinglabs.com/blog/agentic-secops-survival-guide</link>
      <guid>https://www.reversinglabs.com/blog/agentic-secops-survival-guide</guid>
      <pubDate>Wed, 10 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-10T15:00:00.000Z</dc:date>
      <description><![CDATA[Agentic AI will disrupt how SOC teams are built — and the way CISOs hire. Here’s how to embrace AI.]]></description>
      <dc:creator><![CDATA[Ericka Chickowski]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/robot-secops.jpg" type="image/jpeg" />
      <category><![CDATA[Security Operations]]></category>
    </item>
    <item>
      <title><![CDATA[Phishing attacks leverage TikTok, Instagram Reels]]></title>
      <link>https://www.reversinglabs.com/blog/social-media-attacks-phishing</link>
      <guid>https://www.reversinglabs.com/blog/social-media-attacks-phishing</guid>
      <pubDate>Tue, 09 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-09T15:00:00.000Z</dc:date>
      <description><![CDATA[RL has discovered two social engineering attack techniques targeting users via short-form videos. Here’s how they work.]]></description>
      <dc:creator><![CDATA[Zaria Vuksan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Reasearchers-Notebook-TikTok-Blog.webp" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[How 56 npm packages used binding.gyp to steal secrets]]></title>
      <link>https://www.reversinglabs.com/blog/npm-bindinggyp-cicd-secrets</link>
      <guid>https://www.reversinglabs.com/blog/npm-bindinggyp-cicd-secrets</guid>
      <pubDate>Thu, 04 Jun 2026 21:30:00 GMT</pubDate>
      <dc:date>2026-06-04T21:30:00.000Z</dc:date>
      <description><![CDATA[The attack is notable for its breadth, flooding npm with malicious package versions.]]></description>
      <dc:creator><![CDATA[RL Research Team]]></dc:creator>
      <author><![CDATA[content@reversinglabs.com (RL Research Team)]]></author>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Blog-Thousands-of-developer-projects-compromised-in-npm%20hack.jpg" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[Dependency remediation bolstered with CVE Lite CLI]]></title>
      <link>https://www.reversinglabs.com/blog/cve-lite-cli</link>
      <guid>https://www.reversinglabs.com/blog/cve-lite-cli</guid>
      <pubDate>Thu, 04 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-04T15:00:00.000Z</dc:date>
      <description><![CDATA[OWASP's new dependency scanner gives developers actionable fixes. But supply chain attacks aren’t yet CVEs.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/dependency-cve-lite.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Get ahead of frontier AI: 5 AppSec strategy upgrades]]></title>
      <link>https://www.reversinglabs.com/blog/frontier-ai-update-your-appsec</link>
      <guid>https://www.reversinglabs.com/blog/frontier-ai-update-your-appsec</guid>
      <pubDate>Wed, 03 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-03T15:00:00.000Z</dc:date>
      <description><![CDATA[Frontier AI is collapsing the time from vulnerability discovery to exploit. Here are 5 ways to update your AppSec before it hits.]]></description>
      <dc:creator><![CDATA[Ericka Chickowski]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/out-front-race.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[CVE noise drowns out supply chain threats]]></title>
      <link>https://www.reversinglabs.com/blog/noise-to-signal-malware-matters</link>
      <guid>https://www.reversinglabs.com/blog/noise-to-signal-malware-matters</guid>
      <pubDate>Tue, 02 Jun 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-06-02T15:00:00.000Z</dc:date>
      <description><![CDATA[48,000 CVEs were reported in 2025 — but just 58 were critical. A new report highlights why signal-to-noise ratio matters for AppSec.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/db-meter.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[31 Red Hat npm packages backdoored in 72 seconds]]></title>
      <link>https://www.reversinglabs.com/blog/red-hat-cloud-service-npm-packages-backdoored-in-72-seconds</link>
      <guid>https://www.reversinglabs.com/blog/red-hat-cloud-service-npm-packages-backdoored-in-72-seconds</guid>
      <pubDate>Mon, 01 Jun 2026 21:30:00 GMT</pubDate>
      <dc:date>2026-06-01T21:30:00.000Z</dc:date>
      <description><![CDATA[RL has discovered a new supply chain attack affecting 9.8M total downloads across Red Hat's Hybrid Cloud Console JavaScript ecosystem.]]></description>
      <dc:creator><![CDATA[RL Research Team]]></dc:creator>
      <author><![CDATA[content@reversinglabs.com (RL Research Team)]]></author>
      <enclosure url="https://www.reversinglabs.com/api/media/file/malicious-npm-patch-delivers-reverse-shell.webp" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[Forrester Names RL in Agentic Development Security Market]]></title>
      <link>https://www.reversinglabs.com/blog/forrester-agentic-development-security-landscape</link>
      <guid>https://www.reversinglabs.com/blog/forrester-agentic-development-security-landscape</guid>
      <pubDate>Thu, 28 May 2026 18:00:00 GMT</pubDate>
      <dc:date>2026-05-28T18:00:00.000Z</dc:date>
      <description><![CDATA[The new landscape report maps 35 vendors addressing an emerging category of risk: AI agents writing insecure code at machine speed.]]></description>
      <dc:creator><![CDATA[Jasmine Noel]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Forrester-Securing%20Agentic%20Development%201400x732%20-%20HubSpot%20Featured%20image-1.png" type="image/jpeg" />
      <category><![CDATA[Products & Technology]]></category>
    </item>
    <item>
      <title><![CDATA[5 lessons from vulnerability management's front lines]]></title>
      <link>https://www.reversinglabs.com/blog/5-lessons-vulnerability-management</link>
      <guid>https://www.reversinglabs.com/blog/5-lessons-vulnerability-management</guid>
      <pubDate>Thu, 28 May 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-05-28T15:00:00.000Z</dc:date>
      <description><![CDATA[VM success is determined by findings reaching developers with context — which is getting more challenging. Here's why to shift gears. ]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/shift%20lanes.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Dependency attack takes down ed-tech platform at scale]]></title>
      <link>https://www.reversinglabs.com/blog/canvas-dependency-attack-scale</link>
      <guid>https://www.reversinglabs.com/blog/canvas-dependency-attack-scale</guid>
      <pubDate>Wed, 27 May 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-05-27T15:00:00.000Z</dc:date>
      <description><![CDATA[The Canvas LMS supply chain compromise — which hit during finals week — shows the impact of cascading attacks.]]></description>
      <dc:creator><![CDATA[Ericka Chickowski]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/ransomware.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Researcher's Notebook: Hunting Megalodon Fossils]]></title>
      <link>https://www.reversinglabs.com/blog/hunting-megalodon-fossils</link>
      <guid>https://www.reversinglabs.com/blog/hunting-megalodon-fossils</guid>
      <pubDate>Tue, 26 May 2026 15:30:00 GMT</pubDate>
      <dc:date>2026-05-26T15:30:00.000Z</dc:date>
      <description><![CDATA[Analyzing C2 responses from compromised GitHub Actions linked a current threat to an earlier one, showing the value of retrohunting.]]></description>
      <dc:creator><![CDATA[Robert Simmons]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Hunting-Megalodon-Fossils-Researchers-Notebook.webp" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[GitHub breach: The development ecosystem is in the hot seat]]></title>
      <link>https://www.reversinglabs.com/blog/github-compromise-development-ecosystem</link>
      <guid>https://www.reversinglabs.com/blog/github-compromise-development-ecosystem</guid>
      <pubDate>Fri, 22 May 2026 16:30:00 GMT</pubDate>
      <dc:date>2026-05-22T16:30:00.000Z</dc:date>
      <description><![CDATA[This TeamPCP attack is a serious wakeup call about software supply chain security — and the problems with implicit trust.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/developer-attacks.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[AI agents are the new insider threat]]></title>
      <link>https://www.reversinglabs.com/blog/ai-agents-new-insider-threat</link>
      <guid>https://www.reversinglabs.com/blog/ai-agents-new-insider-threat</guid>
      <pubDate>Thu, 21 May 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-05-21T15:00:00.000Z</dc:date>
      <description><![CDATA[AI security leader and author Steve Wilson explains why you need to rethink security — and treat AI agents as digital workers.]]></description>
      <dc:creator><![CDATA[Paul Roberts]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/robot-army.jpg" type="image/jpeg" />
      <category><![CDATA[Artificial Intelligence (AI)/Machine Learning (ML)]]></category>
    </item>
    <item>
      <title><![CDATA[Hackers abuse parental controls to hijack Google accounts]]></title>
      <link>https://www.reversinglabs.com/blog/parental-control-flaw-google-account</link>
      <guid>https://www.reversinglabs.com/blog/parental-control-flaw-google-account</guid>
      <pubDate>Wed, 20 May 2026 17:30:00 GMT</pubDate>
      <dc:date>2026-05-20T17:30:00.000Z</dc:date>
      <description><![CDATA[Learn how attackers are re-casting adults as minors to bypass recovery and lock users out.]]></description>
      <dc:creator><![CDATA[Zaria Vuksan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Hackers-Abuse-Parental-Controls.jpg" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[Spectra Analyze, Spectra Core Update: Deeper Detection, Smarter Analysis]]></title>
      <link>https://www.reversinglabs.com/blog/spectra-analyze-spectra-core-update52026</link>
      <guid>https://www.reversinglabs.com/blog/spectra-analyze-spectra-core-update52026</guid>
      <pubDate>Wed, 20 May 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-05-20T15:00:00.000Z</dc:date>
      <description><![CDATA[RL threat detection and binary analysis can now close the gap for threat hunters.]]></description>
      <dc:creator><![CDATA[Igor Lasic]]></dc:creator>
      <author><![CDATA[ilasic@reversinglabs.com (Igor Lasic)]]></author>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Spectra-Analyze-Product-Update.png" type="image/jpeg" />
      <category><![CDATA[Products & Technology]]></category>
    </item>
    <item>
      <title><![CDATA[Shai-Hulud code drop: It’s open season for attacks]]></title>
      <link>https://www.reversinglabs.com/blog/the-shai-hulud-code-drop</link>
      <guid>https://www.reversinglabs.com/blog/the-shai-hulud-code-drop</guid>
      <pubDate>Fri, 15 May 2026 02:00:00 GMT</pubDate>
      <dc:date>2026-05-15T02:00:00.000Z</dc:date>
      <description><![CDATA[The npm malware's public release provides a ready-made blueprint for threat actors. Take action on supply chain security.]]></description>
      <dc:creator><![CDATA[Jaikumar Vijayan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/open-sign-window.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[RL Joins NATO Locked Shields Cyber Event: 3 Takeaways]]></title>
      <link>https://www.reversinglabs.com/blog/locked-shields-2026</link>
      <guid>https://www.reversinglabs.com/blog/locked-shields-2026</guid>
      <pubDate>Thu, 14 May 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-05-14T15:00:00.000Z</dc:date>
      <description><![CDATA[ReversingLabs joined defensive teams with its malware analysis platform. Here are key lessons.]]></description>
      <dc:creator><![CDATA[Paul Roberts]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Locked-Shields-2026.jpg" type="image/jpeg" />
      <category><![CDATA[Products & Technology]]></category>
    </item>
    <item>
      <title><![CDATA[Think AI agents are risky? Your underlying stack is too]]></title>
      <link>https://www.reversinglabs.com/blog/ai-agents-risk-underlying-stack</link>
      <guid>https://www.reversinglabs.com/blog/ai-agents-risk-underlying-stack</guid>
      <pubDate>Wed, 13 May 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-05-13T15:00:00.000Z</dc:date>
      <description><![CDATA[To manage agentic AI risk, organizations need to focus more on the infrastructure they run on.]]></description>
      <dc:creator><![CDATA[Jaikumar Vijayan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/ai-infrastructure.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Mini Shai-Hulud tears at OSS trust]]></title>
      <link>https://www.reversinglabs.com/blog/mini-shai-hulud-tears-at-oss-trust</link>
      <guid>https://www.reversinglabs.com/blog/mini-shai-hulud-tears-at-oss-trust</guid>
      <pubDate>Tue, 12 May 2026 19:00:00 GMT</pubDate>
      <dc:date>2026-05-12T19:00:00.000Z</dc:date>
      <description><![CDATA[This latest compromises of popular and infrastructure-level npm packages are rocking the foundations open source. ]]></description>
      <dc:creator><![CDATA[Paul Roberts]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Shai-hulud%20worm.png" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[How Dirty Frag rose from the Copy Fail exploit ]]></title>
      <link>https://www.reversinglabs.com/blog/dirtyfrag-linux-privilege-escalation-exploit</link>
      <guid>https://www.reversinglabs.com/blog/dirtyfrag-linux-privilege-escalation-exploit</guid>
      <pubDate>Tue, 12 May 2026 16:00:00 GMT</pubDate>
      <dc:date>2026-05-12T16:00:00.000Z</dc:date>
      <description><![CDATA[RL documented 163 samples of the Linux exploit's new variants, active malware — and developed YARA rules.]]></description>
      <dc:creator><![CDATA[Igor Lasic]]></dc:creator>
      <author><![CDATA[ilasic@reversinglabs.com (Igor Lasic)]]></author>
      <enclosure url="https://www.reversinglabs.com/api/media/file/DirtyFrag.jpg" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[Selective NVD enrichment: Why it matters]]></title>
      <link>https://www.reversinglabs.com/blog/nist-selective-nvd-enrichment</link>
      <guid>https://www.reversinglabs.com/blog/nist-selective-nvd-enrichment</guid>
      <pubDate>Thu, 07 May 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-05-07T15:00:00.000Z</dc:date>
      <description><![CDATA[AI vulnerability reporting is overwhelming teams — and NIST. But for AppSec, scaling back analysis is cause for alarm.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/nvd-selective-enrichment.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Spectra Analyze in Action: Retrohunting Bots]]></title>
      <link>https://www.reversinglabs.com/blog/spectra-analyze-retrohunting-telegram-bots</link>
      <guid>https://www.reversinglabs.com/blog/spectra-analyze-retrohunting-telegram-bots</guid>
      <pubDate>Wed, 06 May 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-05-06T15:00:00.000Z</dc:date>
      <description><![CDATA[Learn how to use ReversingLabs’ Spectra Analyze to expand your detection of malicious Telegram C2 bots. ]]></description>
      <dc:creator><![CDATA[Zaria Vuksan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/Spectra-Analyze-in-Action-Retrohunting-Telegram-Bots.jpg" type="image/jpeg" />
      <category><![CDATA[Products & Technology]]></category>
    </item>
    <item>
      <title><![CDATA[How Mythos changes the AppSec calculus]]></title>
      <link>https://www.reversinglabs.com/blog/how-mythos-changes-the-appsec-calculus</link>
      <guid>https://www.reversinglabs.com/blog/how-mythos-changes-the-appsec-calculus</guid>
      <pubDate>Tue, 05 May 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-05-05T15:00:00.000Z</dc:date>
      <description><![CDATA[Here are the facts on Claude Mythos — and why a layered application security framework is essential.]]></description>
      <dc:creator><![CDATA[Doug Levin]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/math-strategy.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Copy Fail Flaw: 5 YARA Rules for Detection]]></title>
      <link>https://www.reversinglabs.com/blog/copy-fail-5-yara-rules</link>
      <guid>https://www.reversinglabs.com/blog/copy-fail-5-yara-rules</guid>
      <pubDate>Fri, 01 May 2026 20:00:00 GMT</pubDate>
      <dc:date>2026-05-01T20:00:00.000Z</dc:date>
      <description><![CDATA[Here’s what you need to know about the Linux kernel privilege escalation — and how to use YARA rules to get on top of it.]]></description>
      <dc:creator><![CDATA[Maik Morgenstern]]></dc:creator>
      <author><![CDATA[maik.morgenstern@reversinglabs.com (Maik Morgenstern)]]></author>
      <enclosure url="https://www.reversinglabs.com/api/media/file/linux-penguin-copy-fail-yara-rules.jpg" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[How agentic AI flips the trust model]]></title>
      <link>https://www.reversinglabs.com/blog/agentic-ai-trust-model</link>
      <guid>https://www.reversinglabs.com/blog/agentic-ai-trust-model</guid>
      <pubDate>Thu, 30 Apr 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-04-30T15:00:00.000Z</dc:date>
      <description><![CDATA[ As AppSec shifts focus from the components to data, your strategy needs updating. Are you on top of your trust debt?]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/trust-flip.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Claude adds malware to crypto agent]]></title>
      <link>https://www.reversinglabs.com/blog/claude-promptmink-malware-crypto</link>
      <guid>https://www.reversinglabs.com/blog/claude-promptmink-malware-crypto</guid>
      <pubDate>Wed, 29 Apr 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-04-29T15:00:00.000Z</dc:date>
      <description><![CDATA[PromptMink has evolved into a malicious dependency in a package that allows access to crypto wallets and funds.]]></description>
      <dc:creator><![CDATA[Vladimir Pezo]]></dc:creator>
      <author><![CDATA[vladimir.pezo@reversinglabs.com (Vladimir Pezo)]]></author>
      <enclosure url="https://www.reversinglabs.com/api/media/file/AI-Malware-Crypto.jpg" type="image/jpeg" />
      <category><![CDATA[Threat Research]]></category>
    </item>
    <item>
      <title><![CDATA[MCP rug-pull attack worries mount]]></title>
      <link>https://www.reversinglabs.com/blog/mcp-rug-pull-attack-worries</link>
      <guid>https://www.reversinglabs.com/blog/mcp-rug-pull-attack-worries</guid>
      <pubDate>Wed, 29 Apr 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-04-29T15:00:00.000Z</dc:date>
      <description><![CDATA[This new class of AI tool supply chain attack highlights how trust of agents can be exploited.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/mcp-attacks.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[Can AppSec keep pace with AI coding?]]></title>
      <link>https://www.reversinglabs.com/blog/appsec-keep-up-ai-coding</link>
      <guid>https://www.reversinglabs.com/blog/appsec-keep-up-ai-coding</guid>
      <pubDate>Thu, 23 Apr 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-04-23T15:00:00.000Z</dc:date>
      <description><![CDATA[AI lets software teams generate code at a rate faster than security can validate it. One way to win the race: more AI.]]></description>
      <dc:creator><![CDATA[Jaikumar Vijayan]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/race-ai-coding-risk.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[LLMmap puts its finger on ML attacks]]></title>
      <link>https://www.reversinglabs.com/blog/llmmap-puts-its-finger-on-ml-attacks</link>
      <guid>https://www.reversinglabs.com/blog/llmmap-puts-its-finger-on-ml-attacks</guid>
      <pubDate>Wed, 22 Apr 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-04-22T15:00:00.000Z</dc:date>
      <description><![CDATA[Researchers show how LLM fingerprinting can be used to automate generation of customized attacks.]]></description>
      <dc:creator><![CDATA[John P. Mello Jr.]]></dc:creator>
      <enclosure url="https://www.reversinglabs.com/api/media/file/llmmap-finger-ml-attacks.jpg" type="image/jpeg" />
      <category><![CDATA[AppSec & Supply Chain Security]]></category>
    </item>
    <item>
      <title><![CDATA[QR Code Phishing Evolves: How to Keep Up]]></title>
      <link>https://www.reversinglabs.com/blog/qr-code-phishing-evolves</link>
      <guid>https://www.reversinglabs.com/blog/qr-code-phishing-evolves</guid>
      <pubDate>Tue, 21 Apr 2026 15:00:00 GMT</pubDate>
      <dc:date>2026-04-21T15:00:00.000Z</dc:date>
      <description><![CDATA[Here's what you need to know about the rise of quishing — and how your threat hunting team can get out in front of it.]]></description>
      <dc:creator><![CDATA[Igor Lasic]]></dc:creator>
      <author><![CDATA[ilasic@reversinglabs.com (Igor Lasic)]]></author>
      <enclosure url="https://www.reversinglabs.com/api/media/file/quishing-blog-cover.webp" type="image/jpeg" />
      <category><![CDATA[Products & Technology]]></category>
    </item>
  </channel>
</rss>