ReversingLabs

The AI version of shadow IT is proving to be just as pernicious as its more traditional counterpart — and in some ways, it’s harder for organizations to see and control.Shadow AI refers to AI tools or AI-powered features that employees use for work without the knowledge, approval, or oversight of IT, security, or compliance teams.That use can range fromthe relatively innocuous — an employee pasting a document into ChatGPT or Claude to summarize it — to far riskier things such as installing an un

Key TakeawaysThe agentic SOC replaces batch-oriented triage and escalation with a real-time pipeline that detects, investigates, and responds in minutes, because AI-assisted attackers now find and exploit flaws in seconds.Agents are only as smart as the context they reason on, so a pre-correlated context layer spanning network, endpoint, identity, and threat intelligence matters more than raw model horsepower.The Agentic SOC Alliance is an effort to make that architecture an industry standard ra

Frontier AI models such as Anthropic’s Mythos and ChatGPT-5.5-Cyber are creating a dangerous imbalance in the open-source supply chain by unearthing new vulnerabilities far faster than the ecosystem’s capacity to remediate them — giving rise to the so-called vulnpocalypse.The AI labs opening that asymmetry should help close it by investing in remediation at equal scale, argues Jen Easterly, the former director of the U.S. Cybersecurity Infrastructure and Security Agency, who is calling on the Un

The Open Worldwide Application Security Project’s newest OWASP Top 10 for LLM Applications includes a change that puts a spotlight on the rise of AI risk.While prompt injection and the disclosure of sensitive information still hold the top two spots, excessive agency jumped from sixth place in 2025 to third in 2026 (pushing supply chain and data model poisoning risks down to the fourth and fifth slots).Now part of OWASP’s GenAI Security Project and created  by hundreds of AI security experts, th

New research may show us how AI is set to break a decades old pattern in cybersecurity where malware authors and security teams battle to exploit — and protect — specific flaws and vulnerabilities.Researchers have created a proof-of-concept AI worm that carries no fixed exploit logic at all, but reasons about each machine it reaches, adapts to what it finds, and writes customized attack code on the fly. It then runs on compute cycles stolen from its victims.The paper, “AI Agents Enable Adaptive

Attackers are leveraging infostealer malware-as-a-service (MaaS) for a variety of attacks, with malware of this nature showing up regularly in a variety of campaign types. ReversingLabs found several specific infostealers being used recently: AuraStealer, a very actively updated and maintained stealer with recently improved anti-analysis features, ACRStealer, a long standing malware family that has fallen in and out of use, and RemusStealer, a new potential variant on the infamous LummaStealer.T

Key takeawaysTeamPCP franchised its own attack.Arrests don’t unpublish code.The fix is pipeline hygiene, not law enforcement.Supply chain integrity is now table stakes.Australian law enforcement officials, working with the U.S. Federal Bureau of Investigation, arrested two men Wednesday on cybercrime charges. The men allegedly are members of a global cybercrime syndicate suspected of creating the Shai-Hulud worm, malicious software that victimized thousands of businesses around the world.The Aus

A group of Chinese-speaking cybercriminals is using artificial intelligence to orchestrate malicious attacks on government, media, technology, and gaming organizations, a research report has found.Dubbed UAT-10147, the group is among an emerging class of financially motivated intrusion operators using AI systems to operationalize offensive tradecraft at scale, Cisco Talos threat intelligence group researchers said.Talos threat intelligence researcher Joey Chenexplained in an August 20 blog postt