reversinglabs

Why the Tools You Already Own Won’t Make You PQC-Ready

Source scanners, SBOMs, certificate managers, network monitors, and vendor questionnaires each answer a different question, and none of them inspects the cryptography inside the software you actually ...
reversinglabs

How RL mapped a Midnight Blizzard-linked campaign from two hashes

ReversingLabs (RL) researchers recently identified and classified the malware that Anthropic disclosed in its September 2026 report on how the Russian-based threat group Midnight Blizzard was ...
reversinglabs

The Next MOVEit May Already Be in Your File Transfer Queue

MFT systems, vendor portals, EDI pipelines, and e-signature platforms are recurring targets because they concentrate files, privileged access, and trusted connections to hundreds of external parties, ...
reversinglabs

What a CBOM Is — and Why an SBOM Won't Answer the Quantum Question

Every post-quantum cryptography (PQC) roadmap opens with the same instruction: build an inventory of your cryptography. That is where most programs stall. The algorithms slated for replacement, ...
reversinglabs

AI coding agents expose developer screenshots on GitHub repos

John P. Mello Jr., Freelance technology writer.John P. Mello Jr. An AI agent doesn’t have to go rogue to put an organization at risk. Recent research found agents doing exactly what they were told to ...
reversinglabs

CRA compliance will be judged by the binary you ship

Many organizations still talk about the EU Cyber Resilience Act (CRA) as a 2027 problem. It stopped being one on Sept. 11, 2026. Since that date, manufacturers must report actively exploited ...
reversinglabs

Matt Gyde

Matt Gyde is CRO of ReversingLabs. He has 25 years of executive leadership, with a strong track record of driving operational growth, strategic transformation, and revenue expansion across complex, ...
reversinglabs

Dependency installation security measure already defeated on npm

New research shows that attackers have already routed around a measure that npm adopted in July to close a longstanding security gap. Version 12 of the package manager stopped running dependency ...
reversinglabs

See the Threat Behind Every File

ExtraHop reveals suspicious network activity. ReversingLabs adds the file and software intelligence to determine what the artifact actually is - malicious, tampered, risky, or trusted - so teams can ...
reversinglabs

Why the smartest LLMs are not-so-smart pen testers

A new benchmark of eight leading AI systems shows that an intelligent model still needs a good context-rich harness. John P. Mello Jr., Freelance technology writer.John P. Mello Jr. It’s only logical ...
reversinglabs

Agentic SOC: From Hype to Production

Move beyond AI copilots and basic automation to see how autonomous agents can operate across modern security workflows. See how cloud infrastructure, real-time visibility, verified threat intelligence ...
reversinglabs

Restrospective: How Malicious Updates Poison Your Environment

Get your 14-day free trial of Spectra Assure for Software Supply Chain Security Over the past year, a variety of attacks have happened in the software supply chain space. These attacks have been ...