Blog | ReversingLabs | John P. Mello Jr. (4)

February 14, 2024

5 notable supply chain compromises

2023 was a big year for software security. Here are the key lessons from last year's major attacks to learn from.

February 8, 2024

OWASP Top 10 for LLM 2.0: 3 key AppSec focus areas emerge

A survey of practitioners drove key areas of focus for the vulnerability list for AI models: data privacy, safety and bias, and mapping of vulnerabilities.

January 9, 2024

Zoom joins the vulnerability fray: Will VISS move the needle on AppSec?

Here's what you need to know about Zoom's Vulnerability Impact Scoring System, how it compares to EPSS — and how it can advance your application security.

January 2, 2024

Key reasons third-party risk management programs fail

Here's why organizations are struggling with third-party risk management — and how to develop an effective program.

December 21, 2023

The JetBrains TeamCity software supply chain attack: Lessons learned

The TeamCity incident is similar to SunBurst, which was behind the attack on SolarWinds. But there are differences. Here are lessons learned, to help secure your pipeline.

December 14, 2023

The Hugging Face API token breach: 5 lessons learned

More than 1,500 tokens were exposed, leaving millions of AI models and datasets vulnerable. Here's what your security team can learn from the compromise.

December 13, 2023

Secure AI development guidance: What software teams need to know

U.K. and U.S. cyber-watchdogs say to start with Secure by Design — but don't stop there. Here are key takeaways from their new guidelines.

December 6, 2023

6 ways AI helps SecOps punch back

While AI is mostly seen as opening a new front in the threat landscape, it will also be tapped to fight back with advanced threat hunting and more.

November 22, 2023

Don't let CVEs distract you: Shift your AppSec team's focus to malware

Rather than wasting cycles on vulnerabilities, teams should focus on exploitability, and look for compromises including malware and tampering. Here's why.

November 15, 2023

Zero trust and threat modeling: Is it time for AppSec to get on board?

Is it time for zero trust-based threat modeling for your AppSec? Understand the benefits and challenges.

November 9, 2023

How supply chain security tools can protect ML models

Supply-chain Levels for Software Artifacts (SLSA) and Sigstore are a good first step toward protecting ML models from attack. But they're not a panacea.

November 7, 2023

OWASP Top 10 for LLM update bridges gap between AppSec and AI

Generative AI is advancing at a breakneck pace. Here's a full rundown for your development and app sec teams to keep it from breaking your org's back.

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Partners

Alliances

Resources

Company

Events

Press

5 notable supply chain compromises

OWASP Top 10 for LLM 2.0: 3 key AppSec focus areas emerge

Zoom joins the vulnerability fray: Will VISS move the needle on AppSec?

Key reasons third-party risk management programs fail

The JetBrains TeamCity software supply chain attack: Lessons learned

The Hugging Face API token breach: 5 lessons learned

Secure AI development guidance: What software teams need to know

6 ways AI helps SecOps punch back

Don't let CVEs distract you: Shift your AppSec team's focus to malware

Zero trust and threat modeling: Is it time for AppSec to get on board?

How supply chain security tools can protect ML models

OWASP Top 10 for LLM update bridges gap between AppSec and AI

Topics

Special Reports

The State of Software Supply Chain Security 2024

Upcoming Webinars

ConversingLabs

Topics

Follow us

Subscribe

Special Reports