John P. Mello Jr., Freelance technology writer.John P. Mello Jr. An AI agent doesn’t have to go rogue to put an organization at risk. Recent research found agents doing exactly what they were told to ...
New research shows that attackers have already routed around a measure that npm adopted in July to close a longstanding security gap. Version 12 of the package manager stopped running dependency ...
Many organizations still talk about the EU Cyber Resilience Act (CRA) as a 2027 problem. It stopped being one on Sept. 11, 2026. Since that date, manufacturers must report actively exploited ...
Post-quantum readiness depends on knowing where cryptography lives in the software you run, and a list of components can't tell you that. ReversingLabs identified and classified the malware weeks ...
How sophisticated malware, AI, and broken trust are reshaping software security Discover how AI, sophisticated malware, and broken trust are reshaping software supply chain security and what CISOs ...
Verifying what autonomous agents run, install, load, and send on the NVIDIA Open Agent Safety Platform NVIDIA’s Open Agent Safety Platform gives enterprises powerful controls over what AI agents are ...
While regularly combing through packages available on public repositories such as npm and PyPI, ReversingLabs researchers encounter packages with different combinations of behaviors and ...
It’s a conundrum for application security (AppSec) today: How do you square agentic-assisted development with the basic security principles that keep software trustworthy? Chris Romeo, managing ...
Most of the malicious actors pushing malicious open-source packages that ReversingLabs has observed in recent years employed some form of mimicry as part of their attack plan. That includes so-called ...
The Open Worldwide Application Security Project’s newest OWASP Top 10 for LLM Applications includes a change that puts a spotlight on the rise of AI risk. While prompt injection and the disclosure of ...
RL has discovered an active Microsoft 365 device code phishing campaign that abuses Microsoft's legitimate OAuth 2.0 Device Authorization Grant flow to obtain access to victim accounts. Rather than ...
For software development teams, the warning just after the New Year from DevOps platform vendor CircleCI to immediately rotate any secrets they had stored on the company’s continuous integration ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results