The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • Zen and the Art of SMM Bug Hunting | Finding, Mitigating and Detecting UEFI Vulnerabilities
    Security Research
    Assaf CarlsbadMar 3, 2022

    Zen and the Art of SMM Bug Hunting | Finding, Mitigating and Detecting UEFI Vulnerabilities

  • HermeticWiper | New Destructive Malware Used In Cyber Attacks on Ukraine
    Advanced Persistent Threat
    Juan Andrés Guerrero-SaadeFeb 24, 2022

    HermeticWiper | New Destructive Malware Used In Cyber Attacks on Ukraine

  • Sanctions Be Damned | From Dridex to Macaw, The Evolution of Evil Corp
    Crimeware
    Antonio PirozziFeb 23, 2022

    Sanctions Be Damned | From Dridex to Macaw, The Evolution of Evil Corp

  • Log4j2 In The Wild | Iranian-Aligned Threat Actor "TunnelVision" Actively Exploiting VMware Horizon
    Adversary
    Amitai Ben Shushan EhrlichFeb 17, 2022

    Log4j2 In The Wild | Iranian-Aligned Threat Actor "TunnelVision" Actively Exploiting VMware Horizon

  • ModifiedElephant APT and a Decade of Fabricating Evidence
    Adversary
    Tom HegelFeb 10, 2022

    ModifiedElephant APT and a Decade of Fabricating Evidence

  • Firefox JIT Use-After-Frees | Exploiting CVE-2020-26950
    Security Research
    Max Van AmerongenFeb 3, 2022

    Firefox JIT Use-After-Frees | Exploiting CVE-2020-26950

  • Hacktivism and State-Sponsored Knock-Offs | Attributing Deceptive Hack-and-Leak Operations
    Advanced Persistent Threat
    Juan Andrés Guerrero-SaadeJan 27, 2022

    Hacktivism and State-Sponsored Knock-Offs | Attributing Deceptive Hack-and-Leak Operations

  • BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims
    Crimeware
    Jim WalterJan 18, 2022

    BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims

  • Wading Through Muddy Waters | Recent Activity of an Iranian State-Sponsored Threat Actor
    Advanced Persistent Threat
    Amitai Ben Shushan EhrlichJan 12, 2022

    Wading Through Muddy Waters | Recent Activity of an Iranian State-Sponsored Threat Actor

  • CVE-2021-45608 | NetUSB RCE Flaw in Millions of End User Routers
    Security Research
    Max Van AmerongenJan 11, 2022

    CVE-2021-45608 | NetUSB RCE Flaw in Millions of End User Routers

  • A Threat Hunter’s Guide to the Mac’s Most Prevalent Adware Infections 2022
    Security & Intelligence
    Phil StokesJan 4, 2022

    A Threat Hunter’s Guide to the Mac’s Most Prevalent Adware Infections 2022

  • New Rook Ransomware Feeds Off the Code of Babuk
    Crimeware
    Jim WalterDec 23, 2021

    New Rook Ransomware Feeds Off the Code of Babuk