reversinglabs

Dependency installation security measure already defeated on npm

New research shows that attackers have already routed around a measure that npm adopted in July to close a longstanding security gap. Version 12 of the package manager stopped running dependency ...
reversinglabs

Why the smartest LLMs are not-so-smart pen testers

A new benchmark of eight leading AI systems shows that an intelligent model still needs a good context-rich harness. John P. Mello Jr., Freelance technology writer.John P. Mello Jr. It’s only logical ...
reversinglabs

Can advanced math make AI systems safer?

A new research ecosystem is emerging focused on the application of advanced mathematics to address AI safety challenges. The effort is drawing some of the world’s leading mathematicians, including ...
reversinglabs

Permission Is Not Inspection

Verifying what autonomous agents run, install, load, and send on the NVIDIA Open Agent Safety Platform NVIDIA’s Open Agent Safety Platform gives enterprises powerful controls over what AI agents are ...
reversinglabs

OpenAI: Hugging Face mob agent incident is 'a warning shot'

OpenAI's post-mortem calls the Hugging Face incident a "warning shot": agents chained ordinary infrastructure flaws and reached host-level control across clusters in under 13 hours, with no human ...
reversinglabs

AI coding puts Secure by Design in the spotlight

Same old flaws, bigger stakes: ~40% of CISA's exploited-vulnerability catalog traces back to well-understood, preventable weaknesses (memory safety, input validation, injection). Attackers aren't ...
reversinglabs

Memory-safe programming goes from advocacy to adoption

The coding languages shift — fueled by Microsoft, Google, and Amazon and enabled by AI coding — is driven by the quest for secure software. John P. Mello Jr., Freelance technology writer.John P. Mello ...
reversinglabs

Agentic AI permissions: A core problem — but not the only one

It’s a conundrum for application security (AppSec) today: How do you square agentic-assisted development with the basic security principles that keep software trustworthy? Chris Romeo, managing ...
reversinglabs

Malicious npm campaign targets developers integrating Twilio

The volume of malware on public repositories hasn’t decreased. ReversingLabs (RL) has never seen more malicious packages published on public repositories, and the overall count of malicious software ...
reversinglabs

Rubrik + RL: Bring Threat Intelligence and Detection to Backups

Rubrik + ReversingLabs: Your backups might be infected. Now you'll know. Why backups have become the primary target, not the last resort. What this integration looks like in practice. Close the gap ...
reversinglabs

AI changes cyber spending — but where’s the line-item for tokens?

AI is increasing both the volume and speed of cyberthreats, pushing organizations to invest more in AI-powered security capabilities to keep pace. Yet overall cybersecurity budgets are barely growing, ...