ReversingLabs

Feeling comfortable about the safety of your software supply chain because your organization has invested in SBOMs, signing, and provenance? You shouldn’t.In the AI coding era, those tenets of the traditional trust model aren’t enough to ensure software safety. That’s because that model fails to answer an important security question: What is the code capable of doing?CodeHunter CEO Ken Ammon,writing for Help Net Security, summarized the trust vacuum.“[T]raditional trust models are insufficient w

For this installment of Spectra Analyze in Action, the threat intelligence research team at ReversingLabs explores hunting for Scalable Vector Graphics (SVGs) files. SVGs are a sneaky way attackers can target your organization. Due to their nature as image files, they are typically seen as benign, but recently they have been used as a vector for credential phishing sites, malicious redirection, and infected downloads.To aid in protecting your organization, you can use Spectra Analyze to hunt and

Mention offensive AI and expect the discussion to focus on vulnerability discovery, malware creation, and exploit generation, butrecent researchby Cato Networks identified another — and very potent — application for offensive AI.Cato explained in ablog postthat it evaluated in a controlled Active Directory lab environment, how frontier models behave when combined with agent platforms, MCP-enabled tooling, and operational guidance. “The objective was straightforward: determine how effectively an

After AI models from both OpenAI and Anthropic autonomously compromised systems belonging to external organizations, security experts are calling for robust security controls around the testing and evaluation of AI agents.The more widely reported incident involved OpenAI models that, while being evaluated on their ability to autonomously discover and exploit software vulnerabilities, escaped a sandbox and compromised production systems at the AI platform Hugging Face.The test, called ExploitGym,

If Black Hat USA 2026 is any indication, the cybersecurity industry is going strong. This year’s conference, part of a series of “Hacker Summer Camp” events held in Las Vegas during the first week of August, drew more than 23,000 verified attendees, according to organizer Informa Tech. That was an increase of more than 15% from last year’s show, with AI the dominant theme.Case in point: a packed, last-minute Breaking News session called “Frontier AI Security Breach Exposed” in which OpenAI secur

Three themes run through RL’s Malware Analysis and Threat Hunting portfolio updates for the first half of 2026: Infrastructure Modernization, Automated Incident Response, and AI-ready Architecture.Here are the key highlights:Spectra Detect v6.1: Kubernetes-Native Deployment for Enterprise ScaleSpectra Detect is engineered for speed, scalability, and extensibility, with the ability to process millions of files per day. With the release of version 6.1, Spectra Detect introduces Kubernetes microser

A whopping 95% of all code will be AI-generated within the next five years, Microsoft’s chief technology officer, Kevin Scott,predicted recently. Because AI-generated code tends to be security-challenged, that will be a big headache for security teams.One studyof more than 100 large language models (LLMs) across Java, Python, C#, and JavaScript found that 45% of the code samples failed security tests and introduced vulnerabilities on the OWASP Top 10.That’s not just a quality problem, Leonardo d

Researchers at Upwind found that attackers injected malware directly into the AsyncAPI project’s source repositories before the packages were published to the npm registry.The compromised packages moved through official publishing channels and thus looked legitimate to developers, who were at risk of pulling malicious code into their workstations and CI/CD environments simply by importing the packages.The blast radius of the method extends well past any single application. Once release infrastru