The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

All SentinelLABS Posts

Crimeware
Juan Andrés Guerrero-SaadeMay 19, 2022
CrateDepression | Rust Supply-Chain Attack Infects Cloud CI Pipelines with Go Malware
Security Research
Tom HegelMay 11, 2022
Putting Things in Context | Timelining Threat Campaigns
Security Research
Kasif DekelMay 5, 2022
Vulnerabilities in Avast And AVG Put Millions At Risk
Adversary
Joey ChenMay 2, 2022
Moshen Dragon’s Triad-and-Error Approach | Abusing Security Software to Sideload PlugX and ShadowPad
Crimeware
James HaughomApr 27, 2022
LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility
Crimeware
Antonis TerefosApr 21, 2022
Nokoyawa Ransomware | New Karma/Nemty Variant Wears Thin Disguise
Security Research
Kasif DekelApr 13, 2022
Inside the Black Box | How We Fuzzed Microsoft Defender for IoT and Found Multiple Vulnerabilities
Adversary
Juan Andrés Guerrero-SaadeMar 31, 2022
AcidRain | A Modem Wiper Rains Down on Europe
Security Research
Kasif DekelMar 28, 2022
Pwning Microsoft Azure Defender for IoT | Multiple Flaws Allow Remote Code Execution for All
Adversary
Tom HegelMar 24, 2022
Chinese Threat Actor Scarab Targeting Ukraine
Security Research
Phil StokesMar 21, 2022
The Art and Science of macOS Malware Hunting with radare2 | Leveraging Xrefs, YARA and Zignatures
Security Research
Assaf CarlsbadMar 10, 2022
Another Brick in the Wall: Uncovering SMM Vulnerabilities in HP Firmware

The Latest Threat Research and Intelligence

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

All SentinelLABS Posts

CrateDepression | Rust Supply-Chain Attack Infects Cloud CI Pipelines with Go Malware

Putting Things in Context | Timelining Threat Campaigns

Vulnerabilities in Avast And AVG Put Millions At Risk

Moshen Dragon’s Triad-and-Error Approach | Abusing Security Software to Sideload PlugX and ShadowPad

LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility

Nokoyawa Ransomware | New Karma/Nemty Variant Wears Thin Disguise

Inside the Black Box | How We Fuzzed Microsoft Defender for IoT and Found Multiple Vulnerabilities

AcidRain | A Modem Wiper Rains Down on Europe

Pwning Microsoft Azure Defender for IoT | Multiple Flaws Allow Remote Code Execution for All

Chinese Threat Actor Scarab Targeting Ukraine

The Art and Science of macOS Malware Hunting with radare2 | Leveraging Xrefs, YARA and Zignatures

Another Brick in the Wall: Uncovering SMM Vulnerabilities in HP Firmware