The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • Egregor RaaS Continues the Chaos with Cobalt Strike and Rclone
    Crimeware
    Jim WalterNov 26, 2020

    Egregor RaaS Continues the Chaos with Cobalt Strike and Rclone

  • Ranzy Ransomware | Better Encryption Among New Features of ThunderX Derivative
    Crimeware
    Jim WalterNov 18, 2020

    Ranzy Ransomware | Better Encryption Among New Features of ThunderX Derivative

  • Resourceful macOS Malware Hides in Named Fork
    Security Research
    Phil StokesNov 6, 2020

    Resourceful macOS Malware Hides in Named Fork

  • Moving From Dynamic Emulation of UEFI Modules To Coverage-Guided Fuzzing of UEFI Firmware
    Security Research
    Assaf CarlsbadNov 3, 2020

    Moving From Dynamic Emulation of UEFI Modules To Coverage-Guided Fuzzing of UEFI Firmware

  • Anchor Project for Trickbot Adds ICMP
    Crimeware
    Jason ReavesOct 30, 2020

    Anchor Project for Trickbot Adds ICMP

  • Misusing msvsmon and the Windows Remote Debugger
    Security Research
    Michael MyngerbayevOct 26, 2020

    Misusing msvsmon and the Windows Remote Debugger

  • An Inside Look at How Ryuk Evolved Its Encryption and Evasion Techniques
    Crimeware
    Marco FigueroaOct 22, 2020

    An Inside Look at How Ryuk Evolved Its Encryption and Evasion Techniques

  • Purple Fox EK | New CVEs, Steganography, and Virtualization Added to Attack Flow
    Crimeware
    Gal KristalOct 19, 2020

    Purple Fox EK | New CVEs, Steganography, and Virtualization Added to Attack Flow

  • Leveraging LD_AUDIT to Beat the Traditional Linux Library Preloading Technique
    Security Research
    Lior RibakOct 13, 2020

    Leveraging LD_AUDIT to Beat the Traditional Linux Library Preloading Technique

  • Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware
    Security Research
    Assaf CarlsbadOct 8, 2020

    Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware

  • The FONIX RaaS | New Low-Key Threat with Unnecessary Complexities
    Crimeware
    Jim WalterOct 6, 2020

    The FONIX RaaS | New Low-Key Threat with Unnecessary Complexities

  • Threat Intel | Cyber Attacks Leveraging the COVID-19/CoronaVirus Pandemic
    Security & Intelligence
    Jim WalterSep 4, 2020

    Threat Intel | Cyber Attacks Leveraging the COVID-19/CoronaVirus Pandemic