The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • Deep Insight into “FIN7” Malware Chain: From Office Macro Malware to Lightweight JS Loader

    Deep Insight into “FIN7” Malware Chain: From Office Macro Malware to Lightweight JS Loader

  • Info Stealers | How Malware Hacks Private User Data

    Info Stealers | How Malware Hacks Private User Data

  • Detecting macOS.GMERA Malware Through Behavioral Inspection

    Detecting macOS.GMERA Malware Through Behavioral Inspection

  • Trickbot Update: Brief Analysis of a Recent Trickbot Payload

    Trickbot Update: Brief Analysis of a Recent Trickbot Payload

  • FIN6 “FrameworkPOS”: Point-of-Sale Malware Analysis & Internals

    FIN6 “FrameworkPOS”: Point-of-Sale Malware Analysis & Internals

  • RIG Exploit Kit Chain Internals

    RIG Exploit Kit Chain Internals

  • Gootkit Banking Trojan | Part 3: Retrieving the Final Payload

    Gootkit Banking Trojan | Part 3: Retrieving the Final Payload

  • macOS Incident Response | Part 3: System Manipulation

    macOS Incident Response | Part 3: System Manipulation

  • Gootkit Banking Trojan | Part 2: Persistence & Other Capabilities

    Gootkit Banking Trojan | Part 2: Persistence & Other Capabilities

  • macOS Incident Response | Part 2: User Data, Activity and Behavior

    macOS Incident Response | Part 2: User Data, Activity and Behavior

  • macOS Incident Response | Part 1: Collecting Device, File & System Data

    macOS Incident Response | Part 1: Collecting Device, File & System Data

  • Gootkit Banking Trojan | Deep Dive into Anti-Analysis Features

    Gootkit Banking Trojan | Deep Dive into Anti-Analysis Features