The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • EGoManiac | An Unscrupulous Turkish-Nexus Threat Actor

    EGoManiac | An Unscrupulous Turkish-Nexus Threat Actor

  • 6 Pro Tricks for Rapid macOS Malware Triage with Radare2

    6 Pro Tricks for Rapid macOS Malware Triage with Radare2

  • Hive Attacks | Analysis of the Human-Operated Ransomware Targeting Healthcare

    Hive Attacks | Analysis of the Human-Operated Ransomware Targeting Healthcare

  • ShadowPad | A Masterpiece of Privately Sold Malware in Chinese Espionage

    ShadowPad | A Masterpiece of Privately Sold Malware in Chinese Espionage

  • Massive New AdLoad Campaign Goes Entirely Undetected By Apple’s XProtect

    Massive New AdLoad Campaign Goes Entirely Undetected By Apple’s XProtect

  • Hotcobalt – New Cobalt Strike DoS Vulnerability That Lets You Halt Operations

    Hotcobalt – New Cobalt Strike DoS Vulnerability That Lets You Halt Operations

  • MeteorExpress | Mysterious Wiper Paralyzes Iranian Trains with Epic Troll

    MeteorExpress | Mysterious Wiper Paralyzes Iranian Trains with Epic Troll

  • CVE-2021-3438: 16 Years In Hiding – Millions of Printers Worldwide Vulnerable

    CVE-2021-3438: 16 Years In Hiding – Millions of Printers Worldwide Vulnerable

  • Conti Unpacked | Understanding Ransomware Development As a Response to Detection

    Conti Unpacked | Understanding Ransomware Development As a Response to Detection

  • Bypassing macOS TCC User Privacy Protections By Accident and Design

    Bypassing macOS TCC User Privacy Protections By Accident and Design

  • Evasive Maneuvers | Massive IcedID Campaign Aims For Stealth with Benign Macros

    Evasive Maneuvers | Massive IcedID Campaign Aims For Stealth with Benign Macros

  • Gootloader: ‘Initial Access as a Service’ Platform Expands Its Search for High Value Targets

    Gootloader: ‘Initial Access as a Service’ Platform Expands Its Search for High Value Targets