Lost in package chaos? @ReversingLabs has your back. Get free risk assessments for 6M+ npm, PyPI, NuGet, RubyGems & VS Code packages. Clarity starts here! š
U.S.
Joined June 2021
- Tweets421
- Following482
- Followers138
- Likes206
secure.software retweeted
šØRL researchers have detected a new batch of compromised #npm packages maintained by several developers. We suspect teselagen-admin & techsupportrxnt accounts were compromised. eslint-config-teselagen is one of the many affected packages: secure.software/npm/packagesā¦
secure.software retweeted
Who Will Maintain Open Sourceās Future? xitter.cf/i/broadcasts/1kvJpMgeBā¦
secure.software retweeted
š Happening this Friday at @BSides_ABQ: @KadiGrigg will be taking the stage for her talk - Trail Blazing: Lessons from the Oregon Trail for a Secure Software Supply Chain. Learn more: bit.ly/410BILC #BSidesABQ #AppSec #OpenSourceSecurity
ALT Promotional banner for a BSides Albuquerque talk titled 'Trailblazing: Lessons from the Oregon Trail for a Secure Software Supply Chain' on Friday, July 25th at 2:45 PM MST, featuring speaker Kadi McKean, RL Community Manager.
secure.software retweeted
ā ļøš§µ RL researches have detected a supply chain attack in an #npm package with a total download count of over 2 million: secure.software/npm/packagesā¦ #OSS #Dev
š£Our incredible cheerleader @KadiGrigg was on the ConversingLabs #Podcast today to discuss the Spectra Assure Community Badge. Learn more about it here: reversinglabs.com/blog/safe-ā¦
ConversingLabs: Security Badging Open-Source Projects xitter.cf/i/broadcasts/1OyKALVrLā¦
Whenever RL threat researchers discover new malicious #OSS packages, they make sure to update secure.software so that the #dev community can have the most up-to-date info.šBeware of colortoolsv2 on #npm.
ā ļøš§µRL threat researchers detected a malicious #npm package abusing #blockchain for malicious command hosting: secure.software/npm/packagesā¦
secure.software retweeted
ā ļøš§µRL threat researchers detected a malicious #npm package abusing #blockchain for malicious command hosting: secure.software/npm/packagesā¦
secure.software retweeted
Launching Support for VS Code in Spectra Assure Community xitter.cf/i/broadcasts/1mrxmPwrDā¦
secure.software retweeted
If you're proud of your #SoftwareSupplyChainSecurity standards, put the Spectra Assure Community BadgeĀ®ļø front & center on your #OSS project. Show the world you're not messing around.š #Dev #GitHub #PyPI #npm bit.ly/4ljhpRo
secure.software retweeted
š Milestone Unlocked!
We just dropped the official @ReversingLabs Community Docs ā your guide to all things Spectra Assure!
š”ļø Build safer software
āļø Contribute like a pro
š¤ Join our OSS fam
Dive in š docs.secure.software/communiā¦
#OpenSource #DevSecOps #SupplyChainSecurity
secure.software retweeted
ā ļøš§µ RL researchers detected a new malicious campaign targeting #PyPI users. Several packages are pretending to be "time" related utilities, but are actually used to steal sensitive data like cloud tokens.
ALT code from "time" related packages
secure.software retweeted
ā ļøš§µ RL researchers discovered a new malicious #PyPI package, in which attackers are once again trying to steal #crypto trading related secrets. Details: secure.software/pypi/packageā¦
secure.software retweeted
Balancing automation and human expertise is key to a successful #testing strategy. Listen to my interview with @pgrizzaffi to explore the realities of #testautomation and get valuable guidance. štestguild.com/podcasts/automā¦Ā #automationtesting #softwaretesting #testguildpodcast
Key #vscode hack takeaway from @ReversingLabs' Karlo Zanki: "Automatic updating of software dependencies has advantages, but it can also be abused by malicious actors" develop.secure.software/vs-cā¦
"Ground truth" is key .... #SBOMs are designed to help teams protect their #softwaresupplychainsecurity, by making the composition of applications more transparent. But a lack of standardization creates a challenge for using SBOMs to bolster security reversinglabs.com/blog/why-gā¦
secure.software retweeted
3/ Sounds terrifying.
In this weekās #SSBlogwatch we remember Ronald Reagan.
For @ReversingLabsā @SecuredSoftware: reversinglabs.com/blog/c-scrā¦
secure.software retweeted
2/ Itās all about #cybersecurity #SupplyChain #RiskManagement, as the Washington wonks now insist on calling it.
Beltway chatter is all #CSCRM this, guidance that and policy the other.
secure.software retweeted
š§µ: A whole alphabet soup of agencies, offices and councils are springing up in D.C. and beyond.
Theyāre trying to help us with the #SoftwareSupplyChain #security problem.
reversinglabs.com/blog/c-scrā¦
secure.software retweeted
"Writing a good song is not mimicry, or replication, or pastiche, it is the opposite. It is an act of self-murder that destroys all one has strived to produce in the past. "-- @nickcave, on #ChatGPT "writing" song lyrics in a #NickCave-like style... theredhandfiles.com/chat-gptā¦
secure.software retweeted
Here is the video link to my "Welcome to the Jungle: Pentesting AWS" talk at @CactusCon. Another great conference! It's always good to hang out with friends and meet new people. youtube.com/watch?v=H-htdzteā¦