Source scanners, SBOMs, certificate managers, network monitors, and vendor questionnaires each answer a different question, and none of them inspects the cryptography inside the software you actually ...
A malware campaign that was discovered early this year targeting JavaScript and Python developers with cryptocurrency-related fake recruiter tasks has spread to Terraform providers and Go modules, ...
CAMBRIDGE, Mass., October 21, 2026 — ReversingLabs (RL), the trusted name in file and software security, announced that its Spectra Assure platform has been named a winner in Cyber Defense Magazine's ...
Every post-quantum cryptography (PQC) roadmap opens with the same instruction: build an inventory of your cryptography. That is where most programs stall. The algorithms slated for replacement, ...
MFT and other trusted systems collect files, access and connections. Patching and inspecting what moves through it are separate defenses. ReversingLabs identified and classified the malware weeks ...
You can't patch what you can't find. PHP2Shell is already being exploited, creating an urgent need to identify vulnerable PHP components across your software environment. But what about PHP hidden ...
The Open Worldwide Application Security Project’s newest OWASP Top 10 for LLM Applications includes a change that puts a spotlight on the rise of AI risk. While prompt injection and the disclosure of ...
Threat actors have all kinds of motivations for targeting open-source software (OSS) repositories like the Python Package Index (PyPI). Financial gain is one of them. As ReversingLabs (RL) 2025 ...
This year, ReversingLabs (RL) researchers have discovered malware on various open-source software (OSS) platforms that target crypto users and developers. This is an attack trend RL saw explode in ...
Security experts are warning of widespread phishing attacks that have compromised the accounts of prominent open-source software (OSS) developers. The campaign has placed malicious code designed to ...
RL researchers have been observing and detecting malicious versions of the npm package @validate-sdk/v2 since October 2025. The package exports functions that pretend to encode data and validate ...
Earlier this week, the TeamPCP attack spread from GitHub Actions and npm to the PyPI ecosystem. The victim: The LiteLLM package, an open-source Python library and proxy server that provides a unified ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results