The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • USB Over Ethernet | Multiple Vulnerabilities in AWS and Other Major Cloud Services
    Security Research
    Kasif DekelDec 7, 2021

    USB Over Ethernet | Multiple Vulnerabilities in AWS and Other Major Cloud Services

  • GSOh No! Hunting for Vulnerabilities in VirtualBox Network Offloads
    Security Research
    Max Van AmerongenNov 23, 2021

    GSOh No! Hunting for Vulnerabilities in VirtualBox Network Offloads

  • Infect If Needed | A Deeper Dive Into Targeted Backdoor macOS.Macma
    Security Research
    Phil StokesNov 15, 2021

    Infect If Needed | A Deeper Dive Into Targeted Backdoor macOS.Macma

  • CVE-2021-43267: Remote Linux Kernel Heap Overflow | TIPC Module Allows Arbitrary Code Execution
    Security Research
    Max Van AmerongenNov 4, 2021

    CVE-2021-43267: Remote Linux Kernel Heap Overflow | TIPC Module Allows Arbitrary Code Execution

  • Spook Ransomware | Prometheus Derivative Names Those That Pay, Shames Those That Don’t
    Crimeware
    Jim WalterOct 28, 2021

    Spook Ransomware | Prometheus Derivative Names Those That Pay, Shames Those That Don’t

  • AlphaGolang | A Step-by-Step Go Malware Reversing Methodology for IDA Pro
    Security Research
    Juan Andrés Guerrero-SaadeOct 21, 2021

    AlphaGolang | A Step-by-Step Go Malware Reversing Methodology for IDA Pro

  • Karma Ransomware | An Emerging Threat With A Hint of Nemty Pedigree
    Crimeware
    Antonis TerefosOct 18, 2021

    Karma Ransomware | An Emerging Threat With A Hint of Nemty Pedigree

  • Techniques for String Decryption in macOS Malware with Radare2
    Security Research
    Phil StokesOct 12, 2021

    Techniques for String Decryption in macOS Malware with Radare2

  • New Version Of Apostle Ransomware Reemerges In Targeted Attack On Higher Education
    Adversary
    Amitai Ben Shushan EhrlichSep 30, 2021

    New Version Of Apostle Ransomware Reemerges In Targeted Attack On Higher Education

  • Defeating macOS Malware Anti-Analysis Tricks with Radare2
    Security Research
    Phil StokesSep 20, 2021

    Defeating macOS Malware Anti-Analysis Tricks with Radare2

  • CVE-2021-3437 | HP OMEN Gaming Hub Privilege Escalation Bug Hits Millions of Gaming Devices
    Security Research
    Kasif DekelSep 14, 2021

    CVE-2021-3437 | HP OMEN Gaming Hub Privilege Escalation Bug Hits Millions of Gaming Devices

  • Hide and Seek | New Zloader Infection Chain Comes With Improved Stealth and Evasion Mechanisms
    Crimeware
    Antonio PirozziSep 13, 2021

    Hide and Seek | New Zloader Infection Chain Comes With Improved Stealth and Evasion Mechanisms