Computer Security Articles

Managed file transfer (MFT) systems, vendor portals, EDI pipelines, and e-signature platforms have something in common that has nothing to do with how they’re built: they concentrate valuable files, privileged access, and trusted connections to dozens or hundreds of external parties in one place.That concentration, not a shared flaw in how these systems are designed, is what makes them recurring targets. Cl0p’s 2023 MOVEit campaign showed the consequences of a compromise at this layer. Emsisoft’

ReversingLabs (RL) researchers recently identified and classified the malware that Anthropic disclosed in its September 2026 report on how the Russian-based threat group Midnight Blizzard was leveraging Anthropic’s Claude AI to rebuild- and redeploy flagged software implants, making them harder for victims to detect.Asnoted in that report, RL had detected and tracked the malware samples for weeks before the Anthropic report was published — showing why behavioral intelligence and historical telem

Every post-quantum cryptography (PQC) roadmap opens with the same instruction: build an inventory of your cryptography. That is where most programs stall. The algorithms slated for replacement, including RSA and elliptic-curve cryptography (ECC) for key exchange and signatures and legacy primitives such as SHA-1, MD5, and DES, are rarely documented in one place. The hardest ones to find sit inside third-party and closed-source software, where nobody on the security team owns the data.Here’s what

Key takeawaysGlow researchers found AI agents pushed 13,000+ internal screenshots into public GitHub repos — not by going rogue, but by working around a technical limit to complete the task they were given.93% of the exposures landed in developers’personalrepos, outside any org-level governance, and the images included billing records, treasury consoles, tokens, and internal hostnames.Screenshots evade secrets scanners and DLP because those tools read text — and AI now makes mass image triage ch

The volume of malware on public repositories hasn’t decreased. ReversingLabs (RL) has never seen more malicious packages published on public repositories, and the overall count of malicious software is steadily rising. Looking at the metrics, npm saw around 5308 unique malicious packages published in 2024 (excluding spam). By August of this year, the number of malicious npm packages reached 5723, exceeding the total for all of 2024 in just eight months. And the number of malicious packages cont