The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • Thanos Ransomware | RIPlace, Bootlocker and More Added to Feature Set
    Crimeware
    Jim WalterJul 1, 2020

    Thanos Ransomware | RIPlace, Bootlocker and More Added to Feature Set

  • Inside a TrickBot Cobalt Strike Attack Server
    Crimeware
    Joshua PlattJun 22, 2020

    Inside a TrickBot Cobalt Strike Attack Server

  • A Click from the Backyard | Analysis of CVE-2020-9332, a Vulnerable USB Redirection Software
    Security Research
    Michael MyngerbayevJun 17, 2020

    A Click from the Backyard | Analysis of CVE-2020-9332, a Vulnerable USB Redirection Software

  • Valak Malware and the Connection to Gozi Loader ConfCrew
    Crimeware
    Jason ReavesJun 9, 2020

    Valak Malware and the Connection to Gozi Loader ConfCrew

  • NetWalker Ransomware: No Respite, No English Required
    Crimeware
    Jim WalterJun 4, 2020

    NetWalker Ransomware: No Respite, No English Required

  • Sarwent Malware Continues to Evolve With Updated Command Functions
    Security Research
    Jason ReavesMay 21, 2020

    Sarwent Malware Continues to Evolve With Updated Command Functions

  • Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant
    Crimeware
    Jason ReavesMay 14, 2020

    Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant

  • The Anatomy of an APT Attack and CobaltStrike Beacon’s Encoded Configuration
    Advanced Persistent Threat
    Gal KristalMay 11, 2020

    The Anatomy of an APT Attack and CobaltStrike Beacon’s Encoded Configuration

  • Meet NEMTY Successor, Nefilim/Nephilim Ransomware
    Crimeware
    Jim WalterMay 5, 2020

    Meet NEMTY Successor, Nefilim/Nephilim Ransomware

  • IcedID Botnet | The Iceman Goes Phishing for US Tax Returns
    Crimeware
    Joshua PlattApr 24, 2020

    IcedID Botnet | The Iceman Goes Phishing for US Tax Returns

  • Maze Ransomware Update: Extorting and Exposing Victims
    Crimeware
    Jim WalterApr 18, 2020

    Maze Ransomware Update: Extorting and Exposing Victims

  • Deep Dive Into TrickBot Executor Module “mexec”: Hidden “Anchor” Bot Nexus Operations
    Crimeware
    Jason ReavesApr 8, 2020

    Deep Dive Into TrickBot Executor Module “mexec”: Hidden “Anchor” Bot Nexus Operations