 | What RL Found Before Anthropic’s Midnight Blizzard Report | 2026-10-08 | 75 | Igor Lasic | True | | |
| CRA compliance will be judged by the binary you ship | 2026-10-07 | 70 | Matt Gyde | True | | |
| Dependency installation security measure already defeated on npm | 2026-10-06 | 75 | John P. Mello Jr. | True | | |
| Restrospective: How Malicious Updates Poison Your Environment | 2026-09-30 | 90 | Zaria Vuksan | True | | |
| Malicious npm campaign targets developers integrating Twilio | 2026-09-22 | 65 | Lucija Valentić | True | | |
| AI coding puts Secure by Design in the spotlight | 2026-09-15 | 30 | Jaikumar Vijayan | True | | |
| Rubrik + RL: Bring Threat Intelligence and Detection to Backups | 2026-09-10 | 80 | Jim Wojno | True | | |
| OpenAI: Hugging Face mob agent incident is 'a warning shot' | 2026-09-09 | 78 | John P. Mello Jr. | True | | |
| AI summary attack conceals code that tampers with LLMs | 2026-09-08 | 55 | John P. Mello Jr. | True | | |
| Stop Malicious Packages with the Spectra Assure Community Plugin for JFrog Artifactory | 2026-09-02 | 65 | Dave Ferguson | True | | |
| Shai-Hulud worm arrests: What you need to know | 2026-08-28 | 88 | John P. Mello Jr. | True | | |
| Infostealers highlight malware-as-a-service trend | 2026-08-26 | 72 | Zaria Vuksan | True | | |
| Agentic AI scales semiautonomous server attacks | 2026-08-25 | 78 | John P. Mello Jr. | True | | |
| Why software delivery cannot depend on trust alone | 2026-08-19 | 85 | John P. Mello Jr. | True | | |
| Black Hat 2026: AI rewrites the rules of cybersecurity | 2026-08-18 | 75 | Paul Roberts | True | | |
| AI worms are coming — and traditional controls won't stop them | 2026-08-13 | 78 | Paul Roberts | True | | |
| Frontier AI agents: Only as safe as their containment | 2026-08-11 | 78 | | True | | |
| AI domain takeover takeaway: Focus on the harness not the model | 2026-08-06 | 70 | John P. Mello Jr. | True | | |
| How to Leverage Spectra Analyze's Search for SVG Analysis | 2026-08-05 | 45 | Zaria Vuksan | True | | |
| Hidden in plain sight: How SVGs carry malicious scripts | 2026-07-21 | 68 | Zaria Vuksan | True | | |
| ClickFix doesn't attack your knowledge. It attacks your trust. | 2026-07-16 | 78 | Toni Dujmović | True | | |
| The tale of ClickFix: 5 takeaways from RL’s new threat report | 2026-07-14 | 75 | Paul Roberts | True | | |
| AI-BOM minimum elements proposal builds on SBOM lessons | 2026-07-09 | 70 | Ericka Chickowski | True | | |
| Spectra Analyze in Action: Hunting Device Code Phishing Pages | 2026-07-08 | 75 | RL Research Team | True | | |
| ‘Download pumping’ joins the trust-abuse bandwagon | 2026-07-07 | 70 | John P. Mello Jr. | True | | |
| Should frontier AI firms fund OSS ecosystem security? | 2026-06-24 | 30 | Jaikumar Vijayan | True | | |
| npm v12 blocks install scripts: What it means for software security | 2026-06-16 | 70 | John P. Mello Jr. | True | | |
| Device code phishing bypasses password stealing | 2026-06-12 | 75 | Robert Simmons | True | | |
| How to defend ARM64 cloud infrastructure from ITScape | 2026-06-11 | 80 | Robert Simmons | True | | |
| Phishing Attacks Leverage TikTok, Instagram Reels | 2026-06-09 | 70 | Zaria Vuksan | True | | |
| How 56 npm packages used binding.gyp to steal CI/CD secrets | 2026-06-04 | 90 | RL Research Team | True | | |
| CVE Lite CLI closes dependency gap — but won't stop modern threats | 2026-06-04 | 70 | John P. Mello Jr. | True | | |
| Get ahead of frontier AI: 5 AppSec strategy upgrades | 2026-06-03 | 30 | Ericka Chickowski | True | | |
| CVE noise drowns out supply chain threats | 2026-06-02 | 72 | John P. Mello Jr. | True | | |
| 31 Red Hat npm packages backdoored in 72 seconds | 2026-06-01 | 90 | RL Research Team | True | | |
| Forrester Names RL in Agentic Development Security Market | 2026-05-28 | 75 | Jasmine Noel | True | | |
| Researcher's Notebook: Hunting Megalodon Fossils | 2026-05-26 | 78 | Robert Simmons | True | | |
| Dependency attack takes down ed-tech platform at scale | 2026-05-26 | 90 | Ericka Chickowski | True | | |
| GitHub breach: The development ecosystem is in the hot seat | 2026-05-22 | 85 | John P. Mello Jr. | True | | |
| Parental Control Flaw Allows Google Account Hacks | 2026-05-19 | 70 | Zaria Vuksan | True | | |
| Shai-Hulud code drop: It’s open season | 2026-05-15 | 90 | Jaikumar Vijayan | True | | |
| Mini Shai-Hulud tears at OSS trust | 2026-05-12 | 85 | Paul Roberts | True | | |
| How Dirty Frag rose from the Copy Fail exploit | 2026-05-12 | 80 | Igor Lasic | True | | |
| Selective NVD enrichment: Why it matters | 2026-05-07 | 35 | John P. Mello Jr. | True | | |
| Spectra Analyze in Action: Retrohunting Bots | 2026-05-06 | 60 | Zaria Vuksan | True | | |
| 'Copy Fail' Flaw: 5 YARA Rules for Detection | 2026-05-01 | 80 | Maik Morgenstern | True | | |
| Claude adds malware to crypto agent | 2026-04-29 | 90 | Vladimir Pezo | True | | |
| MCP rug-pull attack worries mount | 2026-04-29 | 70 | John P. Mello Jr. | True | | |
| LLMmap puts its finger on ML attacks | 2026-04-22 | 60 | John P. Mello Jr. | True | | |
| QR Code Phishing Evolves: How to Keep Up | 2026-04-21 | 80 | Igor Lasic | True | | |
