Blog | ReversingLabs (37)

September 1, 2022

The Week in Cybersecurity: Cyber espionage operation fueled for months by targeted phishing attacks

This week: a China-linked cyber espionage campaign targets critical entities in Australia and the South China Sea, password manager LastPass gets hacked (again), and more.

August 29, 2022

New malicious packages in PyPI: What it means for securing open source repositories

After a recent discovery of malicious PyPI packages, questions remain about the security community’s ability to mitigate threats posed to open source repositories.

August 25, 2022

The Week in Cybersecurity: French hospital hit with ransomware attack

This week: cybercriminals are continuing to target medical facilities, Twitter’s alleged lack of cybersecurity measures, and more.

August 24, 2022

How abuse.ch evolved into an essential threat hunting platform

When Roman Hüssy started abuse.ch, it began as a simple threat research blog. Now, the project offers an open source threat hunting platform to users worldwide.

August 22, 2022

To secure your CI/CD pipelines, round up the usual suspects

Exploring the “how” of CI/CD compromises, researchers show many of the culprits will be familiar to security teams.

August 18, 2022

6 reasons AppSec teams should shift gears and go beyond legacy vulnerabilities

The NVD represents a minority of software supply chain threats. With attacks surging, teams must shift from legacy vulnerabilities to focusing on malware.

August 18, 2022

The Week in Cybersecurity: Cybercrime growth outpaces the security industry

This week: Evidence has surfaced of cybercrime’s fast-paced growth in 2022, a new Google Chrome zero-day vulnerability is being exploited, and more.

August 15, 2022

Black Hat: We should have seen the Colonial ransomware attack coming, says Kim Zetter

The ransomware attack on Colonial Pipeline was a wakeup call. But cybersecurity journalist Kim Zetter believes we should have seen it coming.

August 15, 2022

The Week in Cybersecurity: MFA shortcomings paved the way for Cisco breach

A breach of Cisco hinged on a compromise of an employee’s Google account using "exhaustion" to trick the user into passing an MFA token to attackers.

August 12, 2022

NVD Analysis: Why you need to modernize your application security

The NVD as it is today does not tell the full story of software risk. Here's why the NVD — and your software security approach — need to be modernized.

August 12, 2022

Researchers demo flaws in GitHub Copilot AI generated code and warn of AI bias

GitHub updated guidance on using its Copilot AI-powered code bot after researchers showed at Black Hat that it often generates vulnerable code.

August 11, 2022

The state of cybersecurity: 'Things are going to get worse before they get better,' Krebs tells Black Hat 2022

Chris Krebs challenged Black Hat attendees to consider four factors that will determine cybersecurity's future: tech, bad actors, government, and people.

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Partners

Alliances

Resources

Company

Events

Press

The Week in Cybersecurity: Cyber espionage operation fueled for months by targeted phishing attacks

New malicious packages in PyPI: What it means for securing open source repositories

The Week in Cybersecurity: French hospital hit with ransomware attack

How abuse.ch evolved into an essential threat hunting platform

To secure your CI/CD pipelines, round up the usual suspects

6 reasons AppSec teams should shift gears and go beyond legacy vulnerabilities

The Week in Cybersecurity: Cybercrime growth outpaces the security industry

Black Hat: We should have seen the Colonial ransomware attack coming, says Kim Zetter

The Week in Cybersecurity: MFA shortcomings paved the way for Cisco breach

NVD Analysis: Why you need to modernize your application security

Researchers demo flaws in GitHub Copilot AI generated code and warn of AI bias

The state of cybersecurity: 'Things are going to get worse before they get better,' Krebs tells Black Hat 2022

Topics

Special Reports

The State of Software Supply Chain Security 2024

Upcoming Webinars

ConversingLabs

Topics

Follow us

Subscribe

Special Reports