Hidden in plain sight: How SVGs carry malicious scripts
SVGs are difficult to detect, can be snuck into content — and can do malicious and legitimate actions. Here's how malicious SVGs work.
Featured
Hidden in plain sight: How SVGs carry malicious scripts
ClickFix doesn't attack your knowledge. It attacks your trust.
One of the most effective attack methods I've analyzed this year runs on legitimate tools and willing users — and AV and EDR is blind to it.
New OWASP tool structures AI threat modeling
Threat Advisor could help teams with AI-specific risks. But a broader AppSec strategy rethink is needed in the AI era.
Latest
Akrites marshals the OSS community to counter AI threats
Industry heavyweights bring new focus to vulnerabilities in the age of AI. Here’s how it might help improve the security of open-source software.
Hidden in plain sight: How SVGs carry malicious scripts
SVGs are difficult to detect, can be snuck into content — and can do malicious and legitimate actions. Here's how malicious SVGs work.
ClickFix doesn't attack your knowledge. It attacks your trust.
One of the most effective attack methods I've analyzed this year runs on legitimate tools and willing users — and AV and EDR is blind to it.
New OWASP tool structures AI threat modeling
Threat Advisor could help teams with AI-specific risks. But a broader AppSec strategy rethink is needed in the AI era.
The tale of ClickFix: 5 takeaways from RL’s new threat report
New RL research explains why ClickFix attacks are multiplying — and why reliable detection requires going beyond AV and EDR.
AI-BOM push borrows from the SBOM playbook
The Institute for Security and Technology's 'Driving AI Transparency' policy paper makes the case for AI-BOM minimum requirements.
Spectra Analyze in Action: Hunting Device Code Phishing Pages
RL recently discovered active Microsoft 365 device code phishing. Here's a walkthrough of how our researchers found the campaign.
‘Download pumping’ joins the trust-abuse bandwagon
While this repository vector is not new, researchers have uncovered a new twist for exploiting trusted metrics to hide malicious code.
This Report from Gartner Defines the Software Supply Chain Security Market
Explore the new Gartner® Magic Quadrant™ for software supply chain security and learn why ReversingLabs is recognized.
AI use in cybersecurity is on the rise — and so is burnout
The Life and Times of Cybersecurity Professionals study highlights a trend that has accelerated as cyber has become more complex.
2026 Gartner® Magic Quadrant™ for Software Supply Chain Security: 5 takeaways
The Magic Quadrant™ for Software Supply Chain Security is a 45-minute read. Here's what we feel security leaders need to pull from it.
Software Supply Chain Security Just Got Its Own Magic Quadrant — and RL Is In It
SSCS is a footnote that grew up, moved out, and got its own report.
Should frontier AI firms fund OSS ecosystem security?
With a ‘vulnpocalypse’ expected, AppSec leaders are calling for the companies to invest in a Great Refactor Fund to secure open source.
Can AI beat AI? 3 challenges with VulnOps adoption
SecOps leaders must tackle cost and risk to deliver autonomous vulnerability operations. But with frontier AI, it's critical.
Gartner® Named RL a Software Supply Chain Security Visionary. Here’s What We See Coming
The first Magic Quadrant™ for Software Supply Chain Security comes as, we feel, the demand for greater supply chain visibility explodes.