ReversingLabs Blog

ReversingLabs Blog https://www.reversinglabs.com/blog Latest blog posts from ReversingLabs en-US Thu, 13 Aug 2026 12:14:24 GMT 2026-08-13T12:14:24.023Z en Thu, 13 Aug 2026 12:14:24 GMT <![CDATA[OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise]]> https://www.reversinglabs.com/blog/owasp-top-10-for-llm-apps-excessive-agency https://www.reversinglabs.com/blog/owasp-top-10-for-llm-apps-excessive-agency Wed, 12 Aug 2026 15:00:00 GMT 2026-08-12T15:00:00.000Z <![CDATA[Frontier AI agents: Only as safe as their containment]]> https://www.reversinglabs.com/blog/ai-agents-containment https://www.reversinglabs.com/blog/ai-agents-containment Tue, 11 Aug 2026 15:00:00 GMT 2026-08-11T15:00:00.000Z <![CDATA[AI domain takeover takeaway: Focus on the harness not the model]]> https://www.reversinglabs.com/blog/ai-domain-takeover-takeaway https://www.reversinglabs.com/blog/ai-domain-takeover-takeaway Thu, 06 Aug 2026 15:00:00 GMT 2026-08-06T15:00:00.000Z <![CDATA[How to Leverage Spectra Analyze's Search for SVG Analysis]]> https://www.reversinglabs.com/blog/spectra-analyze-search-function-for-svg-analysis https://www.reversinglabs.com/blog/spectra-analyze-search-function-for-svg-analysis Wed, 05 Aug 2026 15:00:00 GMT 2026-08-05T15:00:00.000Z <![CDATA[Why AI coding makes zero trust an AppSec requirement]]> https://www.reversinglabs.com/blog/ai-zero-trust-appsec https://www.reversinglabs.com/blog/ai-zero-trust-appsec Tue, 04 Aug 2026 15:00:00 GMT 2026-08-04T15:00:00.000Z <![CDATA[Can Lean improve security for AI-coded software?]]> https://www.reversinglabs.com/blog/can-lean-improve-security-for-ai-coded-software https://www.reversinglabs.com/blog/can-lean-improve-security-for-ai-coded-software Thu, 30 Jul 2026 15:00:00 GMT 2026-07-30T15:00:00.000Z <![CDATA[RL Malware Analysis and Threat Hunting Updates for H1 2026]]> https://www.reversinglabs.com/blog/rl-math-update-h1-2026 https://www.reversinglabs.com/blog/rl-math-update-h1-2026 Thu, 30 Jul 2026 15:00:00 GMT 2026-07-30T15:00:00.000Z <![CDATA[AI coding agents: A call to action on dependency cooldowns]]> https://www.reversinglabs.com/blog/ai-coding-agents-dependency-cooldowns https://www.reversinglabs.com/blog/ai-coding-agents-dependency-cooldowns Tue, 28 Jul 2026 15:00:00 GMT 2026-07-28T15:00:00.000Z <![CDATA[Security teams ditch AI-only pen testing]]> https://www.reversinglabs.com/blog/automated-ai-pen-testing-out https://www.reversinglabs.com/blog/automated-ai-pen-testing-out Thu, 23 Jul 2026 15:00:00 GMT 2026-07-23T15:00:00.000Z <![CDATA[Akrites marshals the open source community to counter AI threats]]> https://www.reversinglabs.com/blog/akrites-counter-ai-threats https://www.reversinglabs.com/blog/akrites-counter-ai-threats Wed, 22 Jul 2026 15:00:00 GMT 2026-07-22T15:00:00.000Z <![CDATA[Hidden in plain sight: How SVGs carry malicious scripts]]> https://www.reversinglabs.com/blog/how-svgs-carry-dangerous-scripts https://www.reversinglabs.com/blog/how-svgs-carry-dangerous-scripts Tue, 21 Jul 2026 15:00:00 GMT 2026-07-21T15:00:00.000Z <![CDATA[ClickFix doesn't attack your knowledge. It attacks your trust.]]> https://www.reversinglabs.com/blog/clickfix-attacks-your-trust https://www.reversinglabs.com/blog/clickfix-attacks-your-trust Thu, 16 Jul 2026 15:00:00 GMT 2026-07-16T15:00:00.000Z <![CDATA[New OWASP tool structures AI threat modeling]]> https://www.reversinglabs.com/blog/owasp-threat-advisor https://www.reversinglabs.com/blog/owasp-threat-advisor Wed, 15 Jul 2026 15:00:00 GMT 2026-07-15T15:00:00.000Z <![CDATA[The tale of ClickFix: 5 takeaways from RL’s new threat report]]> https://www.reversinglabs.com/blog/5-takeaways-from-clickfix-threat-report https://www.reversinglabs.com/blog/5-takeaways-from-clickfix-threat-report Tue, 14 Jul 2026 15:00:00 GMT 2026-07-14T15:00:00.000Z <![CDATA[AI-BOM push borrows from the SBOM playbook]]> https://www.reversinglabs.com/blog/ai-bom-minimum-elements-proposal https://www.reversinglabs.com/blog/ai-bom-minimum-elements-proposal Thu, 09 Jul 2026 16:00:00 GMT 2026-07-09T16:00:00.000Z <![CDATA[Hunting Device Code Phishing Pages]]> https://www.reversinglabs.com/blog/device-code-phishing-walkthrough https://www.reversinglabs.com/blog/device-code-phishing-walkthrough Wed, 08 Jul 2026 15:00:00 GMT 2026-07-08T15:00:00.000Z <![CDATA[‘Download pumping’ joins the trust-abuse bandwagon]]> https://www.reversinglabs.com/blog/download-pumping-trust-abuse https://www.reversinglabs.com/blog/download-pumping-trust-abuse Tue, 07 Jul 2026 15:00:00 GMT 2026-07-07T15:00:00.000Z <![CDATA[This Report from Gartner Defines the Software Supply Chain Security Market]]> https://www.reversinglabs.com/blog/gartner-report-defines-sscs-market https://www.reversinglabs.com/blog/gartner-report-defines-sscs-market Thu, 02 Jul 2026 15:00:00 GMT 2026-07-02T15:00:00.000Z <![CDATA[AI use in cybersecurity is on the rise — and so is burnout]]> https://www.reversinglabs.com/blog/ai-cybersecurity-burnout https://www.reversinglabs.com/blog/ai-cybersecurity-burnout Wed, 01 Jul 2026 15:00:00 GMT 2026-07-01T15:00:00.000Z <![CDATA[2026 Gartner® Magic Quadrant™ for Software Supply Chain Security: 5 takeaways]]> https://www.reversinglabs.com/blog/5-takeaways-2026-gartner-magic-quadrant-sscs https://www.reversinglabs.com/blog/5-takeaways-2026-gartner-magic-quadrant-sscs Tue, 30 Jun 2026 15:00:00 GMT 2026-06-30T15:00:00.000Z <![CDATA[Software Supply Chain Security Just Got Its Own Magic Quadrant — and RL Is In It ]]> https://www.reversinglabs.com/blog/sscs-magic-quadrant-rl-is-on-it https://www.reversinglabs.com/blog/sscs-magic-quadrant-rl-is-on-it Thu, 25 Jun 2026 15:00:00 GMT 2026-06-25T15:00:00.000Z <![CDATA[Should frontier AI firms fund OSS ecosystem security?]]> https://www.reversinglabs.com/blog/frontier-ai-fund-oss-security https://www.reversinglabs.com/blog/frontier-ai-fund-oss-security Wed, 24 Jun 2026 15:00:00 GMT 2026-06-24T15:00:00.000Z <![CDATA[Can AI beat AI? 3 challenges with VulnOps adoption]]> https://www.reversinglabs.com/blog/3-challenges-ai-driven-vulnops https://www.reversinglabs.com/blog/3-challenges-ai-driven-vulnops Tue, 23 Jun 2026 15:00:00 GMT 2026-06-23T15:00:00.000Z <![CDATA[Gartner® Named RL a Software Supply Chain Security Visionary. Here’s What We See Coming]]> https://www.reversinglabs.com/blog/gartner-rl-sscs-visionary-mario-vuksan https://www.reversinglabs.com/blog/gartner-rl-sscs-visionary-mario-vuksan Thu, 18 Jun 2026 16:00:00 GMT 2026-06-18T16:00:00.000Z <![CDATA[Agentic AI risk isn't a model problem. It's an architecture problem.]]> https://www.reversinglabs.com/blog/agentic-ai-risk-architecture-problem https://www.reversinglabs.com/blog/agentic-ai-risk-architecture-problem Thu, 18 Jun 2026 15:00:00 GMT 2026-06-18T15:00:00.000Z <![CDATA[The race to secure AI coding: 4 steps to rein agents in]]> https://www.reversinglabs.com/blog/race-to-secure-ai-coding https://www.reversinglabs.com/blog/race-to-secure-ai-coding Wed, 17 Jun 2026 15:00:00 GMT 2026-06-17T15:00:00.000Z <![CDATA[31 Red Hat npm packages backdoored by Miasma in 72 seconds]]> https://www.reversinglabs.com/blog/red-hat-cloud-service-npm-packages-backdoored-in-72-seconds https://www.reversinglabs.com/blog/red-hat-cloud-service-npm-packages-backdoored-in-72-seconds Wed, 17 Jun 2026 15:00:00 GMT 2026-06-17T15:00:00.000Z <![CDATA[Update to npm blocks install scripts: What it means for AppSec]]> https://www.reversinglabs.com/blog/npm-v12-blocks-install-scripts https://www.reversinglabs.com/blog/npm-v12-blocks-install-scripts Tue, 16 Jun 2026 15:00:00 GMT 2026-06-16T15:00:00.000Z <![CDATA[Device code phishing bypasses password stealing]]> https://www.reversinglabs.com/blog/device-code-phishing-campaign https://www.reversinglabs.com/blog/device-code-phishing-campaign Fri, 12 Jun 2026 17:00:00 GMT 2026-06-12T17:00:00.000Z <![CDATA[How to defend ARM64 cloud infrastructure from ITScape]]> https://www.reversinglabs.com/blog/defend-cloud-infrastructure-itscape https://www.reversinglabs.com/blog/defend-cloud-infrastructure-itscape Thu, 11 Jun 2026 19:00:00 GMT 2026-06-11T19:00:00.000Z <![CDATA[MCP security tracks API's playbook — we know how that ends]]> https://www.reversinglabs.com/blog/mcp-security-tracks-api-playbook https://www.reversinglabs.com/blog/mcp-security-tracks-api-playbook Thu, 11 Jun 2026 15:00:00 GMT 2026-06-11T15:00:00.000Z <![CDATA[Working with agentic AI: A SecOps survival guide]]> https://www.reversinglabs.com/blog/agentic-secops-survival-guide https://www.reversinglabs.com/blog/agentic-secops-survival-guide Wed, 10 Jun 2026 15:00:00 GMT 2026-06-10T15:00:00.000Z <![CDATA[Phishing attacks leverage TikTok, Instagram Reels]]> https://www.reversinglabs.com/blog/social-media-attacks-phishing https://www.reversinglabs.com/blog/social-media-attacks-phishing Tue, 09 Jun 2026 15:00:00 GMT 2026-06-09T15:00:00.000Z <![CDATA[How 56 npm packages used binding.gyp to steal secrets]]> https://www.reversinglabs.com/blog/npm-bindinggyp-cicd-secrets https://www.reversinglabs.com/blog/npm-bindinggyp-cicd-secrets Thu, 04 Jun 2026 21:30:00 GMT 2026-06-04T21:30:00.000Z <![CDATA[Dependency remediation bolstered with CVE Lite CLI]]> https://www.reversinglabs.com/blog/cve-lite-cli https://www.reversinglabs.com/blog/cve-lite-cli Thu, 04 Jun 2026 15:00:00 GMT 2026-06-04T15:00:00.000Z <![CDATA[Get ahead of frontier AI: 5 AppSec strategy upgrades]]> https://www.reversinglabs.com/blog/frontier-ai-update-your-appsec https://www.reversinglabs.com/blog/frontier-ai-update-your-appsec Wed, 03 Jun 2026 15:00:00 GMT 2026-06-03T15:00:00.000Z <![CDATA[CVE noise drowns out supply chain threats]]> https://www.reversinglabs.com/blog/noise-to-signal-malware-matters https://www.reversinglabs.com/blog/noise-to-signal-malware-matters Tue, 02 Jun 2026 15:00:00 GMT 2026-06-02T15:00:00.000Z <![CDATA[Forrester Names RL in Agentic Development Security Market]]> https://www.reversinglabs.com/blog/forrester-agentic-development-security-landscape https://www.reversinglabs.com/blog/forrester-agentic-development-security-landscape Thu, 28 May 2026 18:00:00 GMT 2026-05-28T18:00:00.000Z <![CDATA[5 lessons from vulnerability management's front lines]]> https://www.reversinglabs.com/blog/5-lessons-vulnerability-management https://www.reversinglabs.com/blog/5-lessons-vulnerability-management Thu, 28 May 2026 15:00:00 GMT 2026-05-28T15:00:00.000Z <![CDATA[Dependency attack takes down ed-tech platform at scale]]> https://www.reversinglabs.com/blog/canvas-dependency-attack-scale https://www.reversinglabs.com/blog/canvas-dependency-attack-scale Wed, 27 May 2026 15:00:00 GMT 2026-05-27T15:00:00.000Z <![CDATA[Researcher's Notebook: Hunting Megalodon Fossils]]> https://www.reversinglabs.com/blog/hunting-megalodon-fossils https://www.reversinglabs.com/blog/hunting-megalodon-fossils Tue, 26 May 2026 15:30:00 GMT 2026-05-26T15:30:00.000Z <![CDATA[GitHub breach: The development ecosystem is in the hot seat]]> https://www.reversinglabs.com/blog/github-compromise-development-ecosystem https://www.reversinglabs.com/blog/github-compromise-development-ecosystem Fri, 22 May 2026 16:30:00 GMT 2026-05-22T16:30:00.000Z <![CDATA[AI agents are the new insider threat]]> https://www.reversinglabs.com/blog/ai-agents-new-insider-threat https://www.reversinglabs.com/blog/ai-agents-new-insider-threat Thu, 21 May 2026 15:00:00 GMT 2026-05-21T15:00:00.000Z <![CDATA[Hackers abuse parental controls to hijack Google accounts]]> https://www.reversinglabs.com/blog/parental-control-flaw-google-account https://www.reversinglabs.com/blog/parental-control-flaw-google-account Wed, 20 May 2026 17:30:00 GMT 2026-05-20T17:30:00.000Z <![CDATA[Spectra Analyze, Spectra Core Update: Deeper Detection, Smarter Analysis]]> https://www.reversinglabs.com/blog/spectra-analyze-spectra-core-update52026 https://www.reversinglabs.com/blog/spectra-analyze-spectra-core-update52026 Wed, 20 May 2026 15:00:00 GMT 2026-05-20T15:00:00.000Z <![CDATA[Shai-Hulud code drop: It’s open season for attacks]]> https://www.reversinglabs.com/blog/the-shai-hulud-code-drop https://www.reversinglabs.com/blog/the-shai-hulud-code-drop Fri, 15 May 2026 02:00:00 GMT 2026-05-15T02:00:00.000Z <![CDATA[RL Joins NATO Locked Shields Cyber Event: 3 Takeaways]]> https://www.reversinglabs.com/blog/locked-shields-2026 https://www.reversinglabs.com/blog/locked-shields-2026 Thu, 14 May 2026 15:00:00 GMT 2026-05-14T15:00:00.000Z <![CDATA[Think AI agents are risky? Your underlying stack is too]]> https://www.reversinglabs.com/blog/ai-agents-risk-underlying-stack https://www.reversinglabs.com/blog/ai-agents-risk-underlying-stack Wed, 13 May 2026 15:00:00 GMT 2026-05-13T15:00:00.000Z <![CDATA[Mini Shai-Hulud tears at OSS trust]]> https://www.reversinglabs.com/blog/mini-shai-hulud-tears-at-oss-trust https://www.reversinglabs.com/blog/mini-shai-hulud-tears-at-oss-trust Tue, 12 May 2026 19:00:00 GMT 2026-05-12T19:00:00.000Z <![CDATA[How Dirty Frag rose from the Copy Fail exploit ]]> https://www.reversinglabs.com/blog/dirtyfrag-linux-privilege-escalation-exploit https://www.reversinglabs.com/blog/dirtyfrag-linux-privilege-escalation-exploit Tue, 12 May 2026 16:00:00 GMT 2026-05-12T16:00:00.000Z