Blog | ReversingLabs | Security Operations (6)

March 9, 2023

The Week in Security: Lazarus attacks same South Korean entity twice, use of hard-coded secrets is up

North Korean-linked hacking group Lazarus attacked the same South Korean financial entity twice in 2022. Also: The number of hard-coded secrets is way up.

March 2, 2023

The Week in Security: LastPass shares disturbing breach details, CISA calls for software maker liability

New details expose that the recent hack on LastPass was worse than previously thought. Also: CISA has called for for software makers who develop insecure software to be held liable.

February 23, 2023

The Week in Security: U.S. Special Ops Command server exposed emails, phishing campaign hits npm

A misconfiguration likely caused a U.S. government server to leak sensitive military emails, and a massive phishing spam campaign has taken over npm.

February 16, 2023

The Week in Security: Russian hackers targeted U.S. gas and electric, malicious PyPI packages show prowess

This week: Russian-linked PIPEDREAM malware targeted critical infrastructure. Also: 400 malicious packages found on PyPI demonstrates attacker prowess.

January 26, 2023

The Week in Security: After breach, 'unusual activity' detected in GoTo and LastPass dev environments

This week: GoTo says its 2022 breach was worse than reported, also affecting LastPass. Also: A hacktivist finds FBI No Fly list on an unsecured server.

January 9, 2023

Shift the SOC left: Why you should integrate DevOps with SecOps

The collaboration between SOCs and software development teams is essential for ensuring your organization's software security. Here's why.

January 5, 2023

The Week in Security: Ransomware attacks close out 2022 with a bang, PyTorch compromise explored

The tail-end of 2022 was plagued by ransomware attacks on critical infrastructure. Also, we break down the PyTorch software supply chain attack.

December 15, 2022

The Week in Security: Wiper malware rains down on 2022, Microsoft certificates abused

This week: Twelve malware wipers have been discovered in 2022. Also: The Cuba ransomware gang abused Microsoft certificates to sign malware.

December 13, 2022

How deep scanning protects your data in the cloud

Organizations need to look beyond traditional approaches for protecting their data in the cloud. Here's how deep scanning's modern approach reduces risk.

November 17, 2022

The Week in Security: Disguised Russian software used in U.S. Army, CDC applications

This week: software security and international relations collide as one tech company falsely brands itself as a U.S. software supplier. Also: a Canadian supermarket chain has been hit with a ransomware attack.

November 10, 2022

The Week in Security: Former Uber CSO convicted over hack cover-up, supply chain attack targets media

This week: Former Uber CSO is convicted for his attempted cover-up of a 2016 hack of the company. Also: A software supply chain attack has pushed out malware to at least 250 media sites.

November 3, 2022

The Week in Security: OpenSSL danger downgraded but still real, GitHub exposed

This week: an expected OpenSSL vulnerability may not be as disastrous as was predicted, but is still very real. Also: Unauthorized hackers accessed 130 GitHub repositories as a result of a Dropbox breach.

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Industry

Partners

Alliances

Resources

Company

Events

Press

Security Operations (6)

The Week in Security: Lazarus attacks same South Korean entity twice, use of hard-coded secrets is up

The Week in Security: LastPass shares disturbing breach details, CISA calls for software maker liability

The Week in Security: U.S. Special Ops Command server exposed emails, phishing campaign hits npm

The Week in Security: Russian hackers targeted U.S. gas and electric, malicious PyPI packages show prowess

The Week in Security: After breach, 'unusual activity' detected in GoTo and LastPass dev environments

Shift the SOC left: Why you should integrate DevOps with SecOps

The Week in Security: Ransomware attacks close out 2022 with a bang, PyTorch compromise explored

The Week in Security: Wiper malware rains down on 2022, Microsoft certificates abused

How deep scanning protects your data in the cloud

The Week in Security: Disguised Russian software used in U.S. Army, CDC applications

The Week in Security: Former Uber CSO convicted over hack cover-up, supply chain attack targets media

The Week in Security: OpenSSL danger downgraded but still real, GitHub exposed

Topics

Special Reports

The 2025 Software Supply Chain Security Report

Upcoming Webinars

ConversingLabs

Security Operations (6)

Topics

Follow us

Subscribe

Special Reports