December 1, 2022
Here's ReversingLabs' discoveries and indicators of compromise (IOCs) for W4SP, as well as links to our YARA rule that can be used to detect the malicious Python packages in your environment.
December 1, 2022
One year ago, a vulnerability in Apache’s Log4j turned the security world on its ear. What has changed since then? Here are the key takeaways from Log4Shell's legacy.
November 30, 2022
Meta’s been fined $276 million for scraping data. What can you do to prevent this in your dev shop?
November 23, 2022
Software supply chain attacks are on the rise because of their reach. Here are 10 valuable lessons from the recent GitHub namespace attack.
November 22, 2022
Your users have targets on their backs: Is your dev team tooling up for that?
November 21, 2022
GitOps can help control configuration drift and enable your infrastructure security to shift left, for starters. Here are four ways it can enable better software security.
All Stories
Software Supply Chain Security
Dev & DevSecOps
CI/CD Security
Container Security