Blog | ReversingLabs | Paul Roberts (3)

May 10, 2023

What’s behind SBOM skepticism? One word: Fear

In this ConversingLabs talk, Josh Corman, founder of I Am The Cavalry, explains what’s behind industry skepticism around software bills of materials.

May 1, 2023

RSAC in review: Supply chain security, cyber war and AI

The stakes were raised at RSAC 2023: A “hot” cyber war in Ukraine, supply chain attacks on the rise — and let's not forget about artificial intelligence.

April 27, 2023

The rise of malware in the software supply chain – and what to do about it

Charlie Jones of ReversingLabs explains risk with supply chain attacks — and what development teams can do to spot malware lurking in signed code.

April 21, 2023

The 3CX supply chain attack gets wilder, marks first 'cascading software supply chain compromise'

The surprising story of the supply chain hack of VoIP provider 3CX got even crazier this week. Here's what your application security need to know.

April 20, 2023

Companies scramble to cover software supply chain security gaps: 3 key survey takeaways

The new ReversingLabs Software Supply Chain Risk Survey found that supply chain security poses serious risk that traditional app sec tools can't address.

April 18, 2023

What’s hot at RSA Conference 2023: 6 must-see malware analysis and threat hunting talks

There is so much to take in at RSAC. Cut through the noise with our list of threat-focused talks you don't want to miss.

April 4, 2023

The 3CX breach was targeted — but the plan was broader

The compromise was limited to their app. But there's a bigger lesson: Supply chain security complacency comes with a cost.

March 21, 2023

Secrets Exposed: How to mitigate secrets risk — and prevent breaches

Leaks and exposures of sensitive information in open source and proprietary code repositories are approaching epidemic proportions.

March 14, 2023

Secrets Exposed: How hackers are gaining access to software secrets

Here’s how attackers are finding software development secrets buried in code repositories — and exploiting them.

February 23, 2023

Secrets Exposed: Why modern development, open source repos spill secrets en masse

The Circle CI breach and other hacks expose why the secrets problem is so prolific. Here's what you need to know about the state of secrets security.

February 8, 2023

Leaky app gives researcher 'total, global control' over the Toyota supplier network

A researcher discovered a JsonWebToken flaw in a Toyota app that gave access to corporate user accounts, as well as suppliers — and even Toyota parts.

January 26, 2023

The Week in Security: After breach, 'unusual activity' detected in GoTo and LastPass dev environments

This week: GoTo says its 2022 breach was worse than reported, also affecting LastPass. Also: A hacktivist finds FBI No Fly list on an unsecured server.

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Partners

Alliances

Resources

Company

Events

Press

What’s behind SBOM skepticism? One word: Fear

RSAC in review: Supply chain security, cyber war and AI

The rise of malware in the software supply chain – and what to do about it

The 3CX supply chain attack gets wilder, marks first 'cascading software supply chain compromise'

Companies scramble to cover software supply chain security gaps: 3 key survey takeaways

What’s hot at RSA Conference 2023: 6 must-see malware analysis and threat hunting talks

The 3CX breach was targeted — but the plan was broader

Secrets Exposed: How to mitigate secrets risk — and prevent breaches

Secrets Exposed: How hackers are gaining access to software secrets

Secrets Exposed: Why modern development, open source repos spill secrets en masse

Leaky app gives researcher 'total, global control' over the Toyota supplier network

The Week in Security: After breach, 'unusual activity' detected in GoTo and LastPass dev environments

Topics

Special Reports

The State of Software Supply Chain Security 2024

Upcoming Webinars

ConversingLabs

Topics

Follow us

Subscribe

Special Reports