ReversingLabs (RL) today launched Spectra Assure Catalog, giving employees and IT teams one trusted place to find and ...

One of the world's leading AI companies just received an important reminder about cybersecurity: Your security is only as strong as the software you trust. On October 26, The Washington Post reported ...

How Malware-as-a-Service campaigns turn users into the ultimate execution vector. The ClickFix social engineering technique does not exploit software — it exploits trust. And the fact that it's ...

AI-powered security researchers gained access to sensitive Anthropic business systems through third-party applications, highlighting a growing enterprise security blind spot. ReversingLabs identified ...

Most organizations manage software approval with a spreadsheet, a file share, and a ticket queue. The approvals rarely reach the people installing the software, and the binaries behind them are rarely ...

Organizations today face significant friction in the process of approving and onboarding third-party software. Traditional assessment methods are manual, siloed, and often highly reliant on ...

You can't patch what you can't find. PHP2Shell is already being exploited, creating an urgent need to identify vulnerable PHP components across your software environment. But what about PHP hidden ...

RL researchers have been observing and detecting malicious versions of the npm package @validate-sdk/v2 since October 2025. The package exports functions that pretend to encode data and validate ...

Short-form videos on social media apps are currently being leveraged by threat actors as a phishing vector, utilizing tutorial style content with the promise of free premium software to lure victims ...

After discovering a malicious VS Code extension in June, ReversingLabs researchers noticed something odd: the name of the VS Code extension was identical to that of a malicious VS Code extension ...

Security experts are warning of widespread phishing attacks that have compromised the accounts of prominent open-source software (OSS) developers. The campaign has placed malicious code designed to ...