🚨 New Speaker Alert 🚨

Agentic SOC: From Hype to Production hits AWS Builder Loft SF on Nov 19. Next speaker: @ExtraHop’s Munawar Hossain on why network-layer visibility is the foundation for agent decision-making.

Reserve your seat: hubs.ly/Q04B_XP10

#AgenticSOC #NetSec

Every tool in your stack can report accurately and still miss the cryptography you’ll need to replace for PQC.

Julian Mansier explains why scanners, SBOMs, and certificate managers don’t see what shipped, and what does.

Read the blog: hubs.ly/Q04BSK5S0

#PQC #CBOM

Many teams still treat the CRA as a 2027 problem, but Article 14 reporting is already live.
Matt Gyde explains why compliance will be judged by the binary you ship.

Read the blog: hubs.ly/Q04BM5wP0

#CRA #SBOM

A fully patched file transfer system can still deliver malicious files.
MOVEit, GoAnywhere, and Cleo exposed the risks surrounding trusted file transfer systems.

Igor Lasic explains why payload inspection must complement patching and EDR.

hubs.ly/Q04BKF800

#MFT #MalwareAnalysis

Heading to @FSISAC Americas Fall Summit in Austin? Meet our team to talk about how ReversingLabs analyzes vendor software binaries to give banks audit-ready evidence instead of assumptions.

Book a meeting: hubs.ly/Q04Bz3Q40

#FSISAC #SupplyChainSecurity

You can't replace cryptography you can't find.

Our own Julian Mansier explores why CBOMs are essential to post-quantum cryptography readiness, and why SBOMs alone aren't enough.

Read more: hubs.ly/Q04Brsn00

#PQC #CBOM

Before Anthropic's Midnight Blizzard report, ReversingLabs had already classified the malware as malicious.

5 builds. 5 hashes. Same malicious behavior.

AI accelerates malware changes. It can't erase the evidence.

Igor Lasic explains: hubs.ly/Q04Bh-pp0

#ThreatIntel

In @CyberScoopNews, our CEO Mario Vuksan argues that agent safety platforms like @nvidia’s need to know what’s inside the software an AI agent installs, not just whether it’s allowed to.

Read: hubs.ly/Q04Bfqrq0

#AISecurity #SupplyChainSecurity

Most teams treat an AI model as data. It’s code that runs on your machine.

In Unsloth Studio, selecting a model could run an attacker’s code (since fixed). A download count is a signal. The file is the evidence.

Read: hubs.ly/Q04B8K1N0

#AISecurity #AppSec

Heading to #OneCon2026? Visit our kiosk near the entrance (Silver Sponsor section) to see our direct @SentinelOne integration live.

Automated file analysis, in-context insights in Singularity, unified SOC intel.

Learn more: hubs.ly/Q04B0bj10
#SecOps

Most security programs assume someone upstream is still reading the bug reports.

Google and curl stepped back from bug bounties as automated reports swamped triage.

Upstream disclosure is a signal. Your build is the evidence.

Read: hubs.ly/Q04zNMkM0

#OpenSource #AppSec

We've been named 2026 Threat Detection Solution Provider of the Year for Spectra Detect in the CyberSecurity Breakthrough Awards.  🏆

Deep file analysis at enterprise scale, built to catch malware as AI speeds up threats.

Read more: hubs.ly/Q04zCxtX0

#ThreatDetection #SecOps

Getting AI agents into production takes more than another model.

Join us, @awscloud, and @ExtraHop at AWS Builder Loft SF on Nov 19 to dig into context, trust, and autonomy in the Agentic SOC. From hype to production.

RSVP: hubs.ly/Q04zCn1_0

#AgenticAI #SecOps

Athena's coalition is growing today with new shield and surface partners: @Ahead, @ApiiroSecurity, @cloudsmith, @hcltech, @manifestcyber, @OligoSecurity, @PaloAltoNtwks, @ReversingLabs, @trysurfai, and @sysdig

Shield partners turn Athena's vulnerability and patch data into ll rules and exploit blocking. Surface partners flag vulnerable software in an organization's stack and show how to fix it. Together, these partners help close the gap between a fix existing and a fix being deployed.

Learn more: chainguard.dev/unchained/athe…

"Why the smartest LLMs are not-so-smart pen testers" w/expert insight by @kevinsurace of @token - reversinglabs.com/blog/smart-llm… via @ReversingLabs

Attackers didn't need to break into pipelines over the past year. They shipped malicious updates through them.

RL researcher Zaria Vuksan looks back at S1ngularity, Shai-Hulud, and TeamPCP, and at the defenses that held up. ⬇️
hubs.ly/Q04yWRbX0 

#SoftwareSupplyChain #AppSec #ShaiHulud

Secure by Design can’t stop at source code.

3CX and SolarWinds showed that malware, tampering, and integrity issues can make their way into trusted software without looking like a traditional vulnerability.

Saša Zdjelar explains why security needs to extend to the final build:
hubs.ly/Q04yzpw-0

#SecureByDesign #AppSec

The patching window has collapsed.

Mean time to exploit crossed zero in 2024, and AI can turn disclosed vulnerabilities into working exploits in ~10-15 minutes.

A patch can now be an answer key for the attacker.

New analysis from ReversingLabs: reversinglabs.com/resources/the-…

Your security stack can’t protect you from what it can’t see.

A VP of Engineering gave Spectra Assure a 5/5 rating on @Gartner_inc Peer Insights™ after it uncovered threats their existing security tools had missed.

See what they had to say: hubs.ly/Q04y6rdV0

🚨 ReversingLabs researchers uncovered a malicious npm package posing as an authorized Twilio bug bounty tool.

The package targeted Twilio Account SIDs and Auth Tokens and exfiltrated them via webhook.

We reported it to npm. It was removed within an hour.

Full research: hubs.ly/Q04y1Qy70