ReversingLabs (RL) today launched Spectra Assure Catalog, giving employees and IT teams one trusted place to find and ...

Last week, PHP imploded, following the disclosure of the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Researchers leveraging AI tools discovered that some dormant vulnerabilities in ...

One of the world's leading AI companies just received an important reminder about cybersecurity: Your security is only as strong as the software you trust. On October 26, The Washington Post reported ...

How Malware-as-a-Service campaigns turn users into the ultimate execution vector. The ClickFix social engineering technique does not exploit software — it exploits trust. And the fact that it's ...

AI-powered security researchers gained access to sensitive Anthropic business systems through third-party applications, highlighting a growing enterprise security blind spot. ReversingLabs identified ...

Most organizations manage software approval with a spreadsheet, a file share, and a ticket queue. The approvals rarely reach the people installing the software, and the binaries behind them are rarely ...

Organizations today face significant friction in the process of approving and onboarding third-party software. Traditional assessment methods are manual, siloed, and often highly reliant on ...

Security experts are warning of widespread phishing attacks that have compromised the accounts of prominent open-source software (OSS) developers. The campaign has placed malicious code designed to ...

Short-form videos on social media apps are currently being leveraged by threat actors as a phishing vector, utilizing tutorial style content with the promise of free premium software to lure victims ...

ReversingLabs researchers have identified more than a dozen malicious packages on the npm public repository since the beginning of August, including multistage, malicious packages that placed Luna ...

RL researchers have been observing and detecting malicious versions of the npm package @validate-sdk/v2 since October 2025. The package exports functions that pretend to encode data and validate ...