Lost in package chaos? @ReversingLabs has your back. Get free risk assessments for 6M+ npm, PyPI, NuGet, RubyGems & VS Code packages. Clarity starts here! 🚀
U.S.
Joined June 2021
- Tweets421
- Following482
- Followers138
- Likes206
secure.software retweeted
🚨RL researchers have detected a new batch of compromised #npm packages maintained by several developers. We suspect teselagen-admin & techsupportrxnt accounts were compromised. eslint-config-teselagen is one of the many affected packages: secure.software/npm/packages…
secure.software retweeted
Who Will Maintain Open Source’s Future? xitter.cf/i/broadcasts/1kvJpMgeB…
secure.software retweeted
📆 Happening this Friday at @BSides_ABQ: @KadiGrigg will be taking the stage for her talk - Trail Blazing: Lessons from the Oregon Trail for a Secure Software Supply Chain. Learn more: bit.ly/410BILC #BSidesABQ #AppSec #OpenSourceSecurity
ALT Promotional banner for a BSides Albuquerque talk titled 'Trailblazing: Lessons from the Oregon Trail for a Secure Software Supply Chain' on Friday, July 25th at 2:45 PM MST, featuring speaker Kadi McKean, RL Community Manager.
secure.software retweeted
⚠️🧵 RL researches have detected a supply chain attack in an #npm package with a total download count of over 2 million: secure.software/npm/packages… #OSS #Dev
📣Our incredible cheerleader @KadiGrigg was on the ConversingLabs #Podcast today to discuss the Spectra Assure Community Badge. Learn more about it here: reversinglabs.com/blog/safe-…
ConversingLabs: Security Badging Open-Source Projects xitter.cf/i/broadcasts/1OyKALVrL…
Whenever RL threat researchers discover new malicious #OSS packages, they make sure to update secure.software so that the #dev community can have the most up-to-date info.👇Beware of colortoolsv2 on #npm.
⚠️🧵RL threat researchers detected a malicious #npm package abusing #blockchain for malicious command hosting: secure.software/npm/packages…
secure.software retweeted
⚠️🧵RL threat researchers detected a malicious #npm package abusing #blockchain for malicious command hosting: secure.software/npm/packages…
secure.software retweeted
Launching Support for VS Code in Spectra Assure Community xitter.cf/i/broadcasts/1mrxmPwrD…
secure.software retweeted
If you're proud of your #SoftwareSupplyChainSecurity standards, put the Spectra Assure Community Badge®️ front & center on your #OSS project. Show the world you're not messing around.👇 #Dev #GitHub #PyPI #npm bit.ly/4ljhpRo
secure.software retweeted
🎉 Milestone Unlocked!
We just dropped the official @ReversingLabs Community Docs — your guide to all things Spectra Assure!
🛡️ Build safer software
⚙️ Contribute like a pro
🤝 Join our OSS fam
Dive in 👉 docs.secure.software/communi…
#OpenSource #DevSecOps #SupplyChainSecurity
secure.software retweeted
⚠️🧵 RL researchers detected a new malicious campaign targeting #PyPI users. Several packages are pretending to be "time" related utilities, but are actually used to steal sensitive data like cloud tokens.
ALT code from "time" related packages
secure.software retweeted
⚠️🧵 RL researchers discovered a new malicious #PyPI package, in which attackers are once again trying to steal #crypto trading related secrets. Details: secure.software/pypi/package…
secure.software retweeted
Balancing automation and human expertise is key to a successful #testing strategy. Listen to my interview with @pgrizzaffi to explore the realities of #testautomation and get valuable guidance. 👉testguild.com/podcasts/autom… #automationtesting #softwaretesting #testguildpodcast
Key #vscode hack takeaway from @ReversingLabs' Karlo Zanki: "Automatic updating of software dependencies has advantages, but it can also be abused by malicious actors" develop.secure.software/vs-c…
"Ground truth" is key .... #SBOMs are designed to help teams protect their #softwaresupplychainsecurity, by making the composition of applications more transparent. But a lack of standardization creates a challenge for using SBOMs to bolster security reversinglabs.com/blog/why-g…
secure.software retweeted
3/ Sounds terrifying.
In this week’s #SSBlogwatch we remember Ronald Reagan.
For @ReversingLabs’ @SecuredSoftware: reversinglabs.com/blog/c-scr…
secure.software retweeted
2/ It’s all about #cybersecurity #SupplyChain #RiskManagement, as the Washington wonks now insist on calling it.
Beltway chatter is all #CSCRM this, guidance that and policy the other.
secure.software retweeted
🧵: A whole alphabet soup of agencies, offices and councils are springing up in D.C. and beyond.
They’re trying to help us with the #SoftwareSupplyChain #security problem.
reversinglabs.com/blog/c-scr…
secure.software retweeted
"Writing a good song is not mimicry, or replication, or pastiche, it is the opposite. It is an act of self-murder that destroys all one has strived to produce in the past. "-- @nickcave, on #ChatGPT "writing" song lyrics in a #NickCave-like style... theredhandfiles.com/chat-gpt…
secure.software retweeted
Here is the video link to my "Welcome to the Jungle: Pentesting AWS" talk at @CactusCon. Another great conference! It's always good to hang out with friends and meet new people. youtube.com/watch?v=H-htdzte…