ReversingLabs
banner
reversinglabs.com
ReversingLabs
@reversinglabs.com
87 followers 81 following 210 posts
ReversingLabs is the trusted name in file and software security. RL - Trust Delivered.
Posts Media Videos Starter Packs
📆 This Thursday, dive into the anatomy of real-world software supply chain attacks like Shai-hulud, Qix & the Salesloft/Drift compromise: https://bit.ly/47r2Wxc

#SoftwareSupplyChainSecurity #DevSecOps #AppSec
The #SOC needs multiple vantage points when investigating #malware. Use this link to get all the new updates for RL's #MalwareAnalysis & #ThreatHunting capabilities: https://bit.ly/4ovf1ID
RL recently introduced significant updates to its #MalwareAnalysis & #ThreatHunting portfolio, adding new AI-driven & Kubernetes-ready capabilities. Join us this Friday to learn more: https://bit.ly/47pe4ff
This method is then being called from procedures that are responsible for generating wallet keys, essentially exfiltrating the sensitive wallet data to the threat actor.
It contains a malicious method "Shuffle" that sends data to a remote URL, which is encrypted in the code, to avoid detection.
⚠️ RL researchers have discovered a malicious #NuGet package that is impersonating "Netherum," a popular #Ethereum library. It has over 10M downloads, but these are most definitely artificially inflated: secure.software/nuget/packag...
#OSS supply chain attacks aren't going away anytime soon. And with fewer young people becoming maintainers, the future of #OpenSource is uncertain. Watch the newest episode of ConversingLabs #podcast, or listen wherever you get your favorite shows: https://bit.ly/3WzF8SV
ConversingLabs: Who Will Maintain Open Source’s Future? | ReversingLabs
GitHub’s Abigail Cabunoc Mayes talks about the uncertainty of open source’s future caused by a shrinking number of Gen Z maintainers.
bit.ly
Malicious content can be found in the application's #GitHub repository (hidden from default screen view): github.com/dawar2151/cl...
github.com
A malicious #MCP package was found on #npm last week by researchers at Koi. While MCP servers are believed to be "the next big thing" for #AI innovation, this incident has some sobering ramifications for #AppSec teams: https://bit.ly/3VTkAoc
The Postmark MCP server attack: 5 key takeaways | ReversingLabs
A malicious Model Context Protocol package was found in the wild last week. Here are lessons from the compromise of the AI interface tool.
bit.ly