The Year In Software Supply Chain Threats: Insights from RL's Annual 2025 Report

Cyber Attacks Grow in Sophistication-Targeting AI, Commercial Software, Crypto, and Open Source

That’s one of the conclusions from the ReversingLabs 2025 Software Supply Chain Security Report, which is based on data analysis of ReversingLabs Spectra Core, the largest private threat repository along with open-source data and independent research. 

These evolving tactics threaten everything from enterprise applications to critical infrastructure, making traditional security methods increasingly ineffective.

Watch ReversingLabs Chief Software Architect Tomislav Peričin and Editorial Director and report author Paul Roberts as they unpack the key findings. Cybersecurity expert Chris Hughes, CEO of Aquia, also weighs in with his insights.

Key Discussion Points: 

✓ The most significant, and lesser known, software supply chain compromises of 2024 (including XZ Utils and JAVS hack)
✓ A 12% rise in developer secret leaks and its impact on open-source security
✓ Security flaws lurking in 30+ popular npm, PyPI, and RubyGems packages
✓ The growing threat to AI and ML software supply chains
✓ What to expect in 2025 — and how to prepare