Stop Malicious Packages with the Spectra Assure Community Plugin for JFrog Artifactory
Package managers auto-pull the latest OSS version — malware included. Protect your pipelines with this free JFrog Artifactory plugin.
Featured
Stop Malicious Packages with the Spectra Assure Community Plugin for JFrog Artifactory
How to build effective agentic SOCs: What you need to know
ExtraHop's Kanaiya Vasani unpacks the concept of the agentic SOC — and how the Agentic SOC Alliance is working to build them out.
Infostealers highlight malware-as-a-service trend
Aurastealer, ACRStealer, and RemusStealer, a new potential LumaStealer variant, show MaaS in action. Here's what you need to know.
Latest
Stop Malicious Packages with the Spectra Assure Community Plugin for JFrog Artifactory
Package managers auto-pull the latest OSS version — malware included. Protect your pipelines with this free JFrog Artifactory plugin.
How to build effective agentic SOCs: What you need to know
ExtraHop's Kanaiya Vasani unpacks the concept of the agentic SOC — and how the Agentic SOC Alliance is working to build them out.
Shai-Hulud worm arrests: Why this is not the end
The TeamPCP actors, alleged to be behind one of the most active supply chain threats, were arrested — but this is not the end of Shai-Hulud.
Extend CrowdStrike Falcon with Permanent Intelligence
ReversingLabs built a Spectra Analyze integration with CrowdStrike Falcon. The connector is available now as part of Spectra Analyze v9.6.0.
Infostealers highlight malware-as-a-service trend
Aurastealer, ACRStealer, and RemusStealer, a new potential LumaStealer variant, show MaaS in action. Here's what you need to know.
Agentic AI scales semiautonomous server attacks
UAT-10147 leveraged agentic AI to go beyond scripting to deliver a backdoor. The method highlights the need for agentic SOCs.
Why shadow AI is far riskier than shadow IT
Organizations don’t realize how pervasive shadow AI has become. And as AI's capability grows, shadow use is harder to manage.
Why software delivery cannot depend on trust alone
Attackers turned the trusted AsyncAPI CI/CD publishing pipeline against its users, and the provenance checks all came back clean.
Black Hat 2026: AI rewrites the rules of cybersecurity
The annual cybersecurity conference focused on frontier AI agents — and what they mean for cyber. Here are three key takeaways.
AI worms are coming — and traditional controls won't stop them
Researchers built a worm that reasons about hosts it infects, and the open-weight models powering it sit outside AI-provider safety controls.
OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise
While prompt injection and data disclosure remain concerns, excessive agency climbed the list — not surprising with recent security incidents.
Frontier AI agents: Only as safe as their containment
The post-mortems of two compromises by rogue AI agents show that security teams need to focus on guardrails, not the AI model.
AI domain takeover takeaway: Focus on the harness not the model
Research into an Active Directory takeover with a single AI prompt highlights why organizations need to focus on agentic SOCs.
How to Leverage Spectra Analyze's Search for SVG Analysis
Here's how to use Spectra Analyze to hunt for malicious SVGs, from setting up queries and evaluations of samples to tips for investigation.
Why AI coding makes zero trust an AppSec requirement
Traditional SBOMs, signing, and provenance all have blind spots, making them no longer capable of assuring software security.