Labs Archive

LABScon25 Replay | Please Connect to the Foreign Entity to Enhance Your User Experience

LABScon / May 6, 2026

Joe FitzPatrick reveals how consumer imports of networked devices pose a real security risk to small businesses and critical infrastructure alike.

Advanced Persistent Threat

fast16 | Mystery Shadow Brokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet

Vitaly Kamluk & Juan Andrés Guerrero-Saade / April 23, 2026

A previously unknown 2005 cyber sabotage framework patches high-precision calculation software in memory to silently corrupt results.

LABScon

LABScon25 Replay | Are Your Chinese Cameras Spying For You Or On You?

LABScon / April 22, 2026

Marc Rogers and Silas Cutler expose how cheap smart home devices conceal a shadow supply chain of shell companies, firmware flaws, and foreign data routing.

AI Research

Building an Adversarial Consensus Engine | Multi-Agent LLMs for Automated Malware Analysis

Phil Stokes / March 19, 2026

Single-tool LLM analysis produces reports that look authoritative but aren't. A serial consensus pipeline catches artifacts and hallucinations at source.

LABScon

LABScon25 Replay | Your Apps May Be Gone, But the Hackers Made $9 Billion and They’re Still Here

LABScon / March 17, 2026

Andrew MacPherson exposes how crypto thieves exploit DeFi architecture, from the $1.5 billion Bybit heist to drainers-as-a-service and fund laundering.

AI Research

From Narrative to Knowledge Graph | LLM-Driven Information Extraction in Cyber Threat Intelligence

Aleksandar Milenkoski & Razvan Gabriel Cirstea / March 9, 2026

LLMs can turn CTI narratives into structured intelligence at scale, but speed-accuracy trade-offs demand careful design for operational defense workflows.

AI Research

Silent Brothers | Ollama Hosts Form Anonymous AI Network Beyond Platform Guardrails

Gabriel Bernadett-Shapiro & Silas Cutler (Censys) / January 29, 2026

Analysis of 175,000 open-source AI hosts across 130 countries reveals a vast compute layer susceptible to resource hijacking and code execution attacks.

LABScon

LABScon25 Replay | How to Bug Hotel Rooms v2.0

LABScon / January 21, 2026

Dan Tentler reveals how consumer hardware coupled with Home Assistant can monitor hotel rooms, detect occupants through walls, and trigger automated alerts.

AI Research

LLMs in the SOC (Part 1) | Why Benchmarks Fail Security Operations Teams

Gabriel Bernadett-Shapiro & Edir Garcia Lazo / January 20, 2026

LLM cybersecurity benchmarks fail to measure what defenders need: faster detection, reduced containment time, and better decisions under pressure.

LABScon

LABScon25 Replay | Hacktivism and War: A Clarifying Discussion

LABScon / January 14, 2026

Jim Walter unpacks the hacktivist landscape and reveals how to distinguish different levels of threat based on persona characteristics.

PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale

LABScon25 Replay | Please Connect to the Foreign Entity to Enhance Your User Experience

fast16 | Mystery Shadow Brokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet

LABScon25 Replay | Are Your Chinese Cameras Spying For You Or On You?

Building an Adversarial Consensus Engine | Multi-Agent LLMs for Automated Malware Analysis

LABScon25 Replay | Your Apps May Be Gone, But the Hackers Made $9 Billion and They’re Still Here

From Narrative to Knowledge Graph | LLM-Driven Information Extraction in Cyber Threat Intelligence

Silent Brothers | Ollama Hosts Form Anonymous AI Network Beyond Platform Guardrails

LABScon25 Replay | How to Bug Hotel Rooms v2.0

LLMs in the SOC (Part 1) | Why Benchmarks Fail Security Operations Teams

LABScon25 Replay | Hacktivism and War: A Clarifying Discussion