ReversingLabs (RL) today launched Spectra Assure Catalog, giving employees and IT teams one trusted place to find and ...
One of the world's leading AI companies just received an important reminder about cybersecurity: Your security is only as strong as the software you trust. On October 26, The Washington Post reported ...
Source scanners, SBOMs, certificate managers, network monitors, and vendor questionnaires each answer a different question, and none of them inspects the cryptography inside the software you actually ...
A malware campaign that was discovered early this year targeting JavaScript and Python developers with cryptocurrency-related fake recruiter tasks has spread to Terraform providers and Go modules, ...
CAMBRIDGE, Mass., October 21, 2026 — ReversingLabs (RL), the trusted name in file and software security, announced that its Spectra Assure platform has been named a winner in Cyber Defense Magazine's ...
Most organizations manage software approval with a spreadsheet, a file share, and a ticket queue. The approvals rarely reach the people installing the software, and the binaries behind them are rarely ...
Organizations today face significant friction in the process of approving and onboarding third-party software. Traditional assessment methods are manual, siloed, and often highly reliant on ...
You can't patch what you can't find. PHP2Shell is already being exploited, creating an urgent need to identify vulnerable PHP components across your software environment. But what about PHP hidden ...
Short-form videos on social media apps are currently being leveraged by threat actors as a phishing vector, utilizing tutorial style content with the promise of free premium software to lure victims ...
Most of the malicious actors pushing malicious open-source packages that ReversingLabs has observed in recent years employed some form of mimicry as part of their attack plan. That includes so-called ...
RL has discovered an active Microsoft 365 device code phishing campaign that abuses Microsoft's legitimate OAuth 2.0 Device Authorization Grant flow to obtain access to victim accounts. Rather than ...