How Malware-as-a-Service campaigns turn users into the ultimate execution vector. The ClickFix social engineering technique does not exploit software — it exploits trust. And the fact that it's ...
CAMBRIDGE, Mass., October 28, 2026 — ReversingLabs (RL) today launched Spectra Assure Catalog, giving employees and IT teams one trusted place to find and download approved software. With Spectra ...
A malware campaign that was discovered early this year targeting JavaScript and Python developers with cryptocurrency-related fake recruiter tasks has spread to Terraform providers and Go modules, ...
CAMBRIDGE, Mass., October 21, 2026 — ReversingLabs (RL), the trusted name in file and software security, announced that its Spectra Assure platform has been named a winner in Cyber Defense Magazine's ...
AI-powered security researchers gained access to sensitive Anthropic business systems through third-party applications, highlighting a growing enterprise security blind spot. ReversingLabs identified ...
Most organizations manage software approval with a spreadsheet, a file share, and a ticket queue. The approvals rarely reach the people installing the software, and the binaries behind them are rarely ...
You can't patch what you can't find. PHP2Shell is already being exploited, creating an urgent need to identify vulnerable PHP components across your software environment. But what about PHP hidden ...
RL researchers have been observing and detecting malicious versions of the npm package @validate-sdk/v2 since October 2025. The package exports functions that pretend to encode data and validate ...
RL had both of Anthropic’s published seed samples, five more stagers, two lure files, and the staging server in its telemetry three to four weeks before Microsoft published and two months before ...
Security experts are warning of widespread phishing attacks that have compromised the accounts of prominent open-source software (OSS) developers. The campaign has placed malicious code designed to ...
OpenAI's post-mortem calls the Hugging Face incident a "warning shot": agents chained ordinary infrastructure flaws and reached host-level control across clusters in under 13 hours, with no human ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results