all InfoSec news logo
all InfoSec news - Your InfoSec news aggregator
Log in Sign up
All InfoSec / Cybersecurity News

Source: blog.reversinglabs.com / ReversingLabs Blog

https://blog.reversinglabs.com/blog
Follow source RSS
EPSS vs. CVSS: Exploit prediction could change the game on software risk management 21 hours ago | blog.reversinglabs.com
alerts application application security change +22
Threat modeling and the supply chain: An essential tool for managing risk across the SDLC 5 days, 18 hours ago | blog.reversinglabs.com
deployment design development lifecycle +18
Chaos engineering and the art of security: Why it's key to resilient software 6 days, 11 hours ago | blog.reversinglabs.com
art attackers chaos chaos engineering +18
NIST CSF 2.0: What it means for modern software supply chain risk management 1 week ago | blog.reversinglabs.com
csf csf 2.0 cybersecurity framework +25
IoT and the supply chain: The road to securing devices 1 week, 6 days ago | blog.reversinglabs.com
devices iot software supply chain security supply +1
SANS DevSecOps report: 5 key takeaways 2 weeks ago | blog.reversinglabs.com
dev & devsecops devsecops key report +2
20 application security pros you should follow 2 weeks, 5 days ago | blog.reversinglabs.com
application application security consuming current +8
Lemons and liability: How security warranties could tame the software market 2 weeks, 6 days ago | blog.reversinglabs.com
american article back economics +15
Threat research roundup: Lessons learned from recent PyPI and npm supply chain attacks 3 weeks ago | blog.reversinglabs.com
attacks aware learn lessons learned +22
VMConnect supply chain attack continues, evidence points to North Korea 3 weeks, 5 days ago | blog.reversinglabs.com
attack august campaign korea +27
10 Hacker Summer Camp speakers to follow year-round 3 weeks, 6 days ago | blog.reversinglabs.com
black hat camp con conferences +16
The Week in Security: WinRAR exploit targets traders, malicious npm packages go after game devs 1 month ago | blog.reversinglabs.com
application application security beyond crypto +21
Supply chain security and technical debt: Is it weighing your team down? 1 month ago | blog.reversinglabs.com
account api bad build +19
Fake Roblox packages target npm with Luna Grabber information stealing-malware 1 month ago | blog.reversinglabs.com
attack august fake information +21
Risk modeling initiative aims to expose the 'hiddenness of knowledge' in the supply chain 1 month ago | blog.reversinglabs.com
dependency dev & devsecops google guac +12
The Week in Security: Researchers hack 'unbreakable' card-shuffling hardware, Discord.io shut after breach 1 month, 1 week ago | blog.reversinglabs.com
attack breach card discord +17
CISA's Secure by Design: Too much, too soon? 1 month, 1 week ago | blog.reversinglabs.com
agency april balance cisa +15
6 things you may have missed at Hacker Summer Camp 1 month, 1 week ago | blog.reversinglabs.com
camp cybersecurity events hacker +14
AI coding helpers get FAILing grade 1 month, 1 week ago | blog.reversinglabs.com
academic analysis chatgpt coding +17
OWASP researcher: Supply chain attacks show organizations must shift beyond vulnerabilities 1 month, 1 week ago | blog.reversinglabs.com
attacks beyond organizations owasp +10
ReversingLabs’ path to success: Staying true to customers and the product was key 1 month, 1 week ago | blog.reversinglabs.com
capital company & events customers cybersecurity +10
The Week in Security: Hackers ramp up Cloudflare Tunnels abuse, U.K. voter data exposed 1 month, 2 weeks ago | blog.reversinglabs.com
abuse application application security beyond +19
Do you trust your software? Why verification matters 1 month, 2 weeks ago | blog.reversinglabs.com
application security automotive automotive industry car +13
Listen up, devs: AI trained to overhear passwords 1 month, 2 weeks ago | blog.reversinglabs.com
dev & devsecops passwords secure software blogwatch
8 Black Hat sessions you don’t want to miss 1 month, 2 weeks ago | blog.reversinglabs.com
black hat black hat usa companies conference +10
VMConnect: Malicious PyPI packages imitate popular open source modules 1 month, 3 weeks ago | blog.reversinglabs.com
collection dev & devsecops eth ethereum +24
ReversingLabs @ Hacker Summer Camp: See you there 1 month, 3 weeks ago | blog.reversinglabs.com
august black hat black hat usa bsides +23
The Week in Security: Malware gives remote access to air-gapped devices, cyber attackers target Italy 1 month, 3 weeks ago | blog.reversinglabs.com
access air-gapped application application security +19
FraudGPT/WormGPT: Scammy for now — but a worrying signpost for software security 1 month, 3 weeks ago | blog.reversinglabs.com
application security dev & devsecops fraudgpt security +3
Rust programming language progress report: New threat modeling, tools bolster supply chain security 1 month, 3 weeks ago | blog.reversinglabs.com
amazon application security bolster development +23
WormGPT: Business email compromise amplified by ChatGPT hack 1 month, 3 weeks ago | blog.reversinglabs.com
abuse business business email compromise chatgpt +18
How to use the ReversingLabs file enrichment API offer for Microsoft Sentinel 1 month, 3 weeks ago | blog.reversinglabs.com
access api changing defenders +16
More malicious npm packages found in wake of JumpCloud supply chain hack 1 month, 4 weeks ago | blog.reversinglabs.com
attack cryptocurrency customers hack +18
The Week in Security: North Korean APT targets developers, Barbie turns to cybercrime 1 month, 4 weeks ago | blog.reversinglabs.com
application application security apt barbie +18
Tools gap leaves the software supply chain exposed: Why you need to upgrade your application … 2 months ago | blog.reversinglabs.com
application application security application security testing attacks +27
No net for some, no root for devs — Google pilot walls off staff internet, … 2 months ago | blog.reversinglabs.com
access dev & devsecops employees google +10
AI and the software supply chain: Security just got a whole lot more complicated 2 months ago | blog.reversinglabs.com
artificial artificial intelligence artificial intelligence (ai) business +17
The Latest Update to the ReversingLabs A1000 Threat Analysis and Hunting Solution 2 months ago | blog.reversinglabs.com
analysis customers down dynamic +14
The Week in Security: Google Cloud Build permissions can be poisoned, WormGPT weaponizes AI 2 months ago | blog.reversinglabs.com
application application security beyond build +16
Safe programming languages: A solid first step 2 months, 1 week ago | blog.reversinglabs.com
application security dev & devsecops languages programming +2
JumpCloud 'nation state’ phishing attack spotlights third-party risk management 2 months, 1 week ago | blog.reversinglabs.com
attack big breach customers +22
Federal CI/CD security guidance: Been there, done that 2 months, 1 week ago | blog.reversinglabs.com
agency attacks cd security cisa +23
The Week in Security: Chinese hackers breach government email, AI models easily poisoned 2 months, 1 week ago | blog.reversinglabs.com
ai models application application security authentication +22
CycloneDX 1.5: The next big step for SBOMs and software transparency 2 months, 2 weeks ago | blog.reversinglabs.com
application artificial big code +21
EU-US data transfers back in hotseat: Security of user data adds to privacy concerns 2 months, 2 weeks ago | blog.reversinglabs.com
application security back data data transfers +14
Introducing new capabilities to continuously improve software supply chain security 2 months, 2 weeks ago | blog.reversinglabs.com
applications big capabilities facing +17
Third-party risk management survey: Prioritize end-to-end software supply chain security — or fail 2 months, 2 weeks ago | blog.reversinglabs.com
application security awareness business connections +26
New Features for ReversingLabs TitaniumScale, Version 3.4 2 months, 2 weeks ago | blog.reversinglabs.com
clients customer driving features +16
Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks 2 months, 2 weeks ago | blog.reversinglabs.com
application attacks campaigns email +25
The Week in Security: Third-party breach exposes customer to LockBit, countries team to block DDoS 2 months, 2 weeks ago | blog.reversinglabs.com
application application security beyond block +23
Here’s MITRE’s top-25 CWE list — with your old vulnerability category favorites 2 months, 3 weeks ago | blog.reversinglabs.com
application security cwe dev & devsecops list +4
Give your Microsoft Sentinel incidents some style 2 months, 3 weeks ago | blog.reversinglabs.com
analysts data decision design +23
The Week in Security: 3rd Party Compromise Lands Pilot Data from American, Southwest Airlines 2 months, 4 weeks ago | blog.reversinglabs.com
airlines american application application security +20
Hackers breached UPS data for SMS phish spree 2 months, 4 weeks ago | blog.reversinglabs.com
breached data dev & devsecops hackers +4
5 reasons why cyber attackers love developers 3 months ago | blog.reversinglabs.com
application application security attackers attacks +11
The Week in Security: BlackCat threatens to leak Reddit data, attackers target npm packages (again) 3 months ago | blog.reversinglabs.com
application application security attackers beyond +21
MITRE’s System of Trust: A discussion about standardizing software supply chain risk 3 months ago | blog.reversinglabs.com
mitre risk software software supply chain +7
Passkeys standard: Time to add it to your dev plans? 3 months ago | blog.reversinglabs.com
dev dev & devsecops passkeys plans +3
OWASP Top 10 for LLMs: Can AI risk be tamed? 3 months ago | blog.reversinglabs.com
application application security chatgpt copilot +29
How to Investigate Security Incidents with Threat Intelligence in Microsoft Sentinel 3 months ago | blog.reversinglabs.com
center compromise context incidents +20

Items published with this topic over the last 90 days.

Latest

EPSS vs. CVSS: Exploit prediction could change the game on software risk management 21 hours ago | blog.reversinglabs.com
alerts application application security change +22
Threat modeling and the supply chain: An essential tool for managing risk across the SDLC 5 days, 18 hours ago | blog.reversinglabs.com
deployment design development lifecycle +18
Chaos engineering and the art of security: Why it's key to resilient software 6 days, 11 hours ago | blog.reversinglabs.com
art attackers chaos chaos engineering +18
NIST CSF 2.0: What it means for modern software supply chain risk management 1 week ago | blog.reversinglabs.com
csf csf 2.0 cybersecurity framework +25
IoT and the supply chain: The road to securing devices 1 week, 6 days ago | blog.reversinglabs.com
devices iot software supply chain security supply +1
SANS DevSecOps report: 5 key takeaways 2 weeks ago | blog.reversinglabs.com
dev & devsecops devsecops key report +2
20 application security pros you should follow 2 weeks, 5 days ago | blog.reversinglabs.com
application application security consuming current +8
Lemons and liability: How security warranties could tame the software market 2 weeks, 6 days ago | blog.reversinglabs.com
american article back economics +15
Threat research roundup: Lessons learned from recent PyPI and npm supply chain attacks 3 weeks ago | blog.reversinglabs.com
attacks aware learn lessons learned +22
VMConnect supply chain attack continues, evidence points to North Korea 3 weeks, 5 days ago | blog.reversinglabs.com
attack august campaign korea +27
10 Hacker Summer Camp speakers to follow year-round 3 weeks, 6 days ago | blog.reversinglabs.com
black hat camp con conferences +16
The Week in Security: WinRAR exploit targets traders, malicious npm packages go after game devs 1 month ago | blog.reversinglabs.com
application application security beyond crypto +21
Supply chain security and technical debt: Is it weighing your team down? 1 month ago | blog.reversinglabs.com
account api bad build +19
Fake Roblox packages target npm with Luna Grabber information stealing-malware 1 month ago | blog.reversinglabs.com
attack august fake information +21
Risk modeling initiative aims to expose the 'hiddenness of knowledge' in the supply chain 1 month ago | blog.reversinglabs.com
dependency dev & devsecops google guac +12
The Week in Security: Researchers hack 'unbreakable' card-shuffling hardware, Discord.io shut after breach 1 month, 1 week ago | blog.reversinglabs.com
attack breach card discord +17
CISA's Secure by Design: Too much, too soon? 1 month, 1 week ago | blog.reversinglabs.com
agency april balance cisa +15
6 things you may have missed at Hacker Summer Camp 1 month, 1 week ago | blog.reversinglabs.com
camp cybersecurity events hacker +14
AI coding helpers get FAILing grade 1 month, 1 week ago | blog.reversinglabs.com
academic analysis chatgpt coding +17
OWASP researcher: Supply chain attacks show organizations must shift beyond vulnerabilities 1 month, 1 week ago | blog.reversinglabs.com
attacks beyond organizations owasp +10
ReversingLabs’ path to success: Staying true to customers and the product was key 1 month, 1 week ago | blog.reversinglabs.com
capital company & events customers cybersecurity +10
The Week in Security: Hackers ramp up Cloudflare Tunnels abuse, U.K. voter data exposed 1 month, 2 weeks ago | blog.reversinglabs.com
abuse application application security beyond +19
Do you trust your software? Why verification matters 1 month, 2 weeks ago | blog.reversinglabs.com
application security automotive automotive industry car +13
Listen up, devs: AI trained to overhear passwords 1 month, 2 weeks ago | blog.reversinglabs.com
dev & devsecops passwords secure software blogwatch
8 Black Hat sessions you don’t want to miss 1 month, 2 weeks ago | blog.reversinglabs.com
black hat black hat usa companies conference +10
VMConnect: Malicious PyPI packages imitate popular open source modules 1 month, 3 weeks ago | blog.reversinglabs.com
collection dev & devsecops eth ethereum +24
ReversingLabs @ Hacker Summer Camp: See you there 1 month, 3 weeks ago | blog.reversinglabs.com
august black hat black hat usa bsides +23
The Week in Security: Malware gives remote access to air-gapped devices, cyber attackers target Italy 1 month, 3 weeks ago | blog.reversinglabs.com
access air-gapped application application security +19
FraudGPT/WormGPT: Scammy for now — but a worrying signpost for software security 1 month, 3 weeks ago | blog.reversinglabs.com
application security dev & devsecops fraudgpt security +3
Rust programming language progress report: New threat modeling, tools bolster supply chain security 1 month, 3 weeks ago | blog.reversinglabs.com
amazon application security bolster development +23
WormGPT: Business email compromise amplified by ChatGPT hack 1 month, 3 weeks ago | blog.reversinglabs.com
abuse business business email compromise chatgpt +18
How to use the ReversingLabs file enrichment API offer for Microsoft Sentinel 1 month, 3 weeks ago | blog.reversinglabs.com
access api changing defenders +16
More malicious npm packages found in wake of JumpCloud supply chain hack 1 month, 4 weeks ago | blog.reversinglabs.com
attack cryptocurrency customers hack +18
The Week in Security: North Korean APT targets developers, Barbie turns to cybercrime 1 month, 4 weeks ago | blog.reversinglabs.com
application application security apt barbie +18
Tools gap leaves the software supply chain exposed: Why you need to upgrade your application … 2 months ago | blog.reversinglabs.com
application application security application security testing attacks +27
No net for some, no root for devs — Google pilot walls off staff internet, … 2 months ago | blog.reversinglabs.com
access dev & devsecops employees google +10
AI and the software supply chain: Security just got a whole lot more complicated 2 months ago | blog.reversinglabs.com
artificial artificial intelligence artificial intelligence (ai) business +17
The Latest Update to the ReversingLabs A1000 Threat Analysis and Hunting Solution 2 months ago | blog.reversinglabs.com
analysis customers down dynamic +14
The Week in Security: Google Cloud Build permissions can be poisoned, WormGPT weaponizes AI 2 months ago | blog.reversinglabs.com
application application security beyond build +16
Safe programming languages: A solid first step 2 months, 1 week ago | blog.reversinglabs.com
application security dev & devsecops languages programming +2
JumpCloud 'nation state’ phishing attack spotlights third-party risk management 2 months, 1 week ago | blog.reversinglabs.com
attack big breach customers +22
Federal CI/CD security guidance: Been there, done that 2 months, 1 week ago | blog.reversinglabs.com
agency attacks cd security cisa +23
The Week in Security: Chinese hackers breach government email, AI models easily poisoned 2 months, 1 week ago | blog.reversinglabs.com
ai models application application security authentication +22
CycloneDX 1.5: The next big step for SBOMs and software transparency 2 months, 2 weeks ago | blog.reversinglabs.com
application artificial big code +21
EU-US data transfers back in hotseat: Security of user data adds to privacy concerns 2 months, 2 weeks ago | blog.reversinglabs.com
application security back data data transfers +14
Introducing new capabilities to continuously improve software supply chain security 2 months, 2 weeks ago | blog.reversinglabs.com
applications big capabilities facing +17
Third-party risk management survey: Prioritize end-to-end software supply chain security — or fail 2 months, 2 weeks ago | blog.reversinglabs.com
application security awareness business connections +26
New Features for ReversingLabs TitaniumScale, Version 3.4 2 months, 2 weeks ago | blog.reversinglabs.com
clients customer driving features +16
Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks 2 months, 2 weeks ago | blog.reversinglabs.com
application attacks campaigns email +25
The Week in Security: Third-party breach exposes customer to LockBit, countries team to block DDoS 2 months, 2 weeks ago | blog.reversinglabs.com
application application security beyond block +23
Here’s MITRE’s top-25 CWE list — with your old vulnerability category favorites 2 months, 3 weeks ago | blog.reversinglabs.com
application security cwe dev & devsecops list +4
Give your Microsoft Sentinel incidents some style 2 months, 3 weeks ago | blog.reversinglabs.com
analysts data decision design +23
The Week in Security: 3rd Party Compromise Lands Pilot Data from American, Southwest Airlines 2 months, 4 weeks ago | blog.reversinglabs.com
airlines american application application security +20
Hackers breached UPS data for SMS phish spree 2 months, 4 weeks ago | blog.reversinglabs.com
breached data dev & devsecops hackers +4
5 reasons why cyber attackers love developers 3 months ago | blog.reversinglabs.com
application application security attackers attacks +11
The Week in Security: BlackCat threatens to leak Reddit data, attackers target npm packages (again) 3 months ago | blog.reversinglabs.com
application application security attackers beyond +21
MITRE’s System of Trust: A discussion about standardizing software supply chain risk 3 months ago | blog.reversinglabs.com
mitre risk software software supply chain +7
Passkeys standard: Time to add it to your dev plans? 3 months ago | blog.reversinglabs.com
dev dev & devsecops passkeys plans +3
OWASP Top 10 for LLMs: Can AI risk be tamed? 3 months ago | blog.reversinglabs.com
application application security chatgpt copilot +29
How to Investigate Security Incidents with Threat Intelligence in Microsoft Sentinel 3 months ago | blog.reversinglabs.com
center compromise context incidents +20

Top (last 7 days)

EPSS vs. CVSS: Exploit prediction could change the game on software risk management 21 hours ago | blog.reversinglabs.com
alerts application application security change +22
Threat modeling and the supply chain: An essential tool for managing risk across the SDLC 5 days, 18 hours ago | blog.reversinglabs.com
deployment design development lifecycle +18
Chaos engineering and the art of security: Why it's key to resilient software 6 days, 11 hours ago | blog.reversinglabs.com
art attackers chaos chaos engineering +18

Jobs in InfoSec / Cybersecurity

Post a job on infosec-jobs.com Find talent on infosec-jobs.com

Business Information Security Officer

@ Metrolink | Los Angeles, CA
View on infosec-jobs.com

Senior Security Engineer

@ Freedom of the Press Foundation | Remote, 4 hour time zone overlap with New York City
View on infosec-jobs.com

Security Engineer

@ ChartMogul | Remote, EU
View on infosec-jobs.com

Elastic Consultant - EMEA

@ Elasticsearch | Germany
View on infosec-jobs.com

Software Development Engineer, Security

@ Binance | Romania, Bucharest
View on infosec-jobs.com

Digital Network Exploitation Analyst III

@ Aperio Global, LLC | Fort Meade, Maryland, United States
View on infosec-jobs.com
View more jobs