ConversingLabs:Conversations
About Threat Hunting and
Software Supply Chain Security

ReversingLabs' Paul Roberts hosts the best minds in threat hunting
and intelligence, software supply chain security — and beyond.

Paul Roberts ReversingLabs
Director of Content and Editorial at RL. Paul is a reporter, editor and industry analyst with 20 years’ experience covering the cybersecurity space. He is the founder and editor in chief at The Security Ledger, a cybersecurity news website. His writing about cyber security has appeared in publications including Forbes, The Christian Science Monitor, MIT Technology Review, The Economist Intelligence Unit, CIO Magazine, ZDNet and Fortune Small Business. He has appeared on NPR’s Marketplace Tech Report, KPCC AirTalk, Fox News Tech Take, Al Jazeera and The Oprah Show.
Season 6, EP3

Securing Medical Devices with SBOMs

In this episode, host Paul Roberts chats with Dr. Kevin Fu of the Archimedes Center at Northeastern University, about the new federal standards for the cybersecurity of medical devices, which includes the use of software bills of materials (SBOMs).

Watch Episode
Season 6, EP 2

The LockBit Takedown: What We Know

In this episode, host Paul Roberts chats with Ali Khan, Field CISO at ReversingLabs, about the recent takedown of the LockBit ransomware group, which is considered to be one of the most prolific cybercrime groups globally.

Watch Episode
Season 5, EP 4

Apple Devices as a Growing Attack Vector

In this ConversingLabs episode, host Paul Roberts speaks with Devin Byrd, Director of Threat Intelligence at Kandji. Byrd explains how Kandji has grown into a major security provider for macOS users, and how the attack vector for macOS and iOS users has increased in recent years. 

Watch Episode
Season 5, EP 3

The Art of Security Chaos Engineering

In this episode, host Paul Roberts chats with Kelly Shortridge, a Senior Principal at Fastly, Black Hat 2023 speaker, and author on how to foster agility and nimbleness in enterprise security teams.

Watch Episode
Season 5, EP 1

Lemons & Liability: What it Means for Software Applications

In this episode, host Paul Roberts chats with Daniel Woods, a Cybersecurity Lecturer at The University of Edinburgh on the sidelines of the 2023 Black Hat USA conference about his briefing: “Lemons and Liability: Cyber Warranties as an Experiment in Software Regulation.”

Watch Episode
Season 4, EP 9

Creating the Standard for Supply Chain Risk

June 21, 2023

In this episode, host Paul Roberts chats with Robert Martin of MITRE and Cassie Crossley of Schneider Electric about their session at this year’s RSA Conference. They explained how MITRE’s System of Trust can serve as a standard for software supply chain risk. The two also chatted with Paul about the greater issues facing software supply chains today, such as standardization and transparency. 

Watch Episode
Season 4, EP 8

How Do You Trust Open Source Software?

June 14, 2023

In this episode, host Paul Roberts chats with Naveen Srinivasan, an OpenSSF Scorecard Maintainer, about his talk at this year’s RSA Conference on how to better trust open source software. In their conversation, Naveen explains how the OpenSSF Scorecard tool can help developers understand the security posture of open source dependencies.

Watch Episode

Special Reports

The 2025 Software Supply Chain Security Report

The 2025 Software Supply Chain Security Report

Software supply chain attacks are an increasingly popular tool for malicious actors. And the rapid embrace of AI and machine learning (ML) tools is introducing new supply chain risks. Here's what your organization needs to know.

March 12, 2025