The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • ThunderCats Hack the FSB | Your Taxes Didn’t Pay For This Op
    Adversary
    Juan Andrés Guerrero-SaadeJun 8, 2021

    ThunderCats Hack the FSB | Your Taxes Didn’t Pay For This Op

  • NobleBaron | New Poisoned Installers Could Be Used In Supply Chain Attacks
    Advanced Persistent Threat
    Juan Andrés Guerrero-SaadeJun 2, 2021

    NobleBaron | New Poisoned Installers Could Be Used In Supply Chain Attacks

  • From Wiper to Ransomware | The Evolution of Agrius
    Adversary
    Amitai Ben Shushan EhrlichMay 25, 2021

    From Wiper to Ransomware | The Evolution of Agrius

  • Caught in the Cloud | How a Monero Cryptominer Exploits Docker Containers
    Crimeware
    Marco FigueroaMay 20, 2021

    Caught in the Cloud | How a Monero Cryptominer Exploits Docker Containers

  • CVE-2021-21551- Hundreds Of Millions Of Dell Computers At Risk Due to Multiple BIOS Driver Privilege Escalation Flaws
    Security Research
    Kasif DekelMay 4, 2021

    CVE-2021-21551- Hundreds Of Millions Of Dell Computers At Risk Due to Multiple BIOS Driver Privilege Escalation Flaws

  • Relaying Potatoes: Another Unexpected Privilege Escalation Vulnerability in Windows RPC Protocol
    Adversary
    Antonio CocomazziApr 26, 2021

    Relaying Potatoes: Another Unexpected Privilege Escalation Vulnerability in Windows RPC Protocol

  • A Deep Dive into Zebrocy’s Dropper Docs
    Adversary
    Marco FigueroaApr 20, 2021

    A Deep Dive into Zebrocy’s Dropper Docs

  • Adventures From UEFI Land: the Hunt For the S3 Boot Script
    Security Research
    Assaf CarlsbadApr 8, 2021

    Adventures From UEFI Land: the Hunt For the S3 Boot Script

  • Avaddon RaaS | Breaks Public Decryptor, Continues On Rampage
    Crimeware
    Jim WalterApr 1, 2021

    Avaddon RaaS | Breaks Public Decryptor, Continues On Rampage

  • Keep Malware Off Your Disk With SentinelOne’s IDA Pro Memory Loader Plugin
    Security Research
    Roman RusetskyMar 25, 2021

    Keep Malware Off Your Disk With SentinelOne’s IDA Pro Memory Loader Plugin

  • New macOS Malware XcodeSpy Targets Xcode Developers with EggShell Backdoor
    Security & Intelligence
    Phil StokesMar 18, 2021

    New macOS Malware XcodeSpy Targets Xcode Developers with EggShell Backdoor

  • Top 15 Essential Malware Analysis Tools
    Security Research
    Marco FigueroaMar 12, 2021

    Top 15 Essential Malware Analysis Tools