ReversingLabs (RL) today launched Spectra Assure Catalog, giving employees and IT teams one trusted place to find and ...

RL had both of Anthropic’s published seed samples, five more stagers, two lure files, and the staging server in its telemetry three to four weeks before Microsoft published and two months before ...

John P. Mello Jr., Freelance technology writer.John P. Mello Jr. An AI agent doesn’t have to go rogue to put an organization at risk. Recent research found agents doing exactly what they were told to ...

New research shows that attackers have already routed around a measure that npm adopted in July to close a longstanding security gap. Version 12 of the package manager stopped running dependency ...

Malicious package volume keeps climbing: npm saw 5,723 malicious packages by August 2026, already more than all of 2024, and compromises of trusted packages are rising. RL found tw-pkgprobe-7731, an ...

It’s a conundrum for application security (AppSec) today: How do you square agentic-assisted development with the basic security principles that keep software trustworthy? Chris Romeo, managing ...

OpenAI's post-mortem calls the Hugging Face incident a "warning shot": agents chained ordinary infrastructure flaws and reached host-level control across clusters in under 13 hours, with no human ...

Nearly half the content passed to the model was invisible to the reader: 1,009 characters sent, 537 displayed, 472 hidden. The summaries contained fabricated data and omitted facts, with no cue to the ...

Enterprise file scanning covers the file sources endpoint antivirus was never built for: email gateways, web proxies, cloud storage, MFT platforms, and network shares. Ingestion channel breadth ...

The agentic SOC replaces batch-oriented triage and escalation with a real-time pipeline that detects, investigates, and responds in minutes, because AI-assisted attackers now find and exploit flaws in ...

New research may show us how AI is set to break a decades old pattern in cybersecurity where malware authors and security teams battle to exploit — and protect — specific flaws and vulnerabilities.

After AI models from both OpenAI and Anthropic autonomously compromised systems belonging to external organizations, security experts are calling for robust security controls around the testing and ...