Computer Security Articles

The predicted wave of autonomous, AI-driven cyberattacks has not yet shown up as a clearly measurable surge in cyber losses. But that is not the same as saying attackers are standing still.In an October 24 search of the ReversingLabs malicious-file corpus, we found a growing number of files containing references to large language model (LLM) APIs. Our estimated high-confidence subset increased from roughly150 files in 2024to620 in 2025and1,680 from January 1 through October 24, 2026. These are e

Updated November 4, 2026On October 29, 2026, attackers stole approximately $6.34 billion in digital assets from Binance in one of the largest cryptocurrency thefts on record. Since our initial analysis, two significant developments have clarified how the attack unfolded.On October 31, the FBI formally attributed the theft to North Korea’s TraderTraitor operation. On November 3, Binance released its initial incident findings, revealing a multi-stage compromise involving malicious software deliver

SummaryLast week, PHP imploded, following the disclosure of the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619.Researchers leveraging AI tools discovered that some dormant vulnerabilities in PHP could be chained together into a functional exploit, which introduced PHP2Shell to the world. This exploit could allow attackers to compromise any sites that use PHP. A fix was rolled out, and chaos ensued. This story echoes what happened earlier this year, with CVE-2026-31431. Also known

SummaryCryptocurrency is being used every day to facilitate a variety of transactions. It’s unlike the usual banking systems, having its own unique strengths and weaknesses. Attackers have made specialized malware to redirect normal transactions to wallets they control in order to steal money, referred to as “Clipbankers”. Due to the nature of cryptocurrency, these transactions are irreversible. ReversingLabs investigated two malware families of this nature, digging into how they work. This blog

One of the world’s leading AI companies just received an important reminder about cybersecurity: Your security is only as strong as the software you trust. On October 26,The Washington Post reportedthat researchers from cybersecurity startup Cathedral used AI agents to discover pathways into sensitive internal systems at Anthropic, the company behind Claude.The most significant detail wasn’t the sophistication of the AI agents or even the speed of the exercise. The researchers reportedly gained