The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • LABScon25 Replay | Simulation Meets Reality: How China’s Cyber Ranges Fuel Cyber Operations
    LABScon
    LABSconNov 25, 2025

    LABScon25 Replay | Simulation Meets Reality: How China’s Cyber Ranges Fuel Cyber Operations

  • Threat Hunting Power Up | Enhance Campaign Discovery With Validin and Synapse
    Security Research
    Tomas GatialNov 17, 2025

    Threat Hunting Power Up | Enhance Campaign Discovery With Validin and Synapse

  • LABScon25 Replay | LLM-Enabled Malware In the Wild
    LABScon
    LABSconNov 3, 2025

    LABScon25 Replay | LLM-Enabled Malware In the Wild

  • PhantomCaptcha | Multi-Stage WebSocket RAT Targets Ukraine in Single-Day Spearphishing Operation
    Adversary
    Tom HegelOct 22, 2025

    PhantomCaptcha | Multi-Stage WebSocket RAT Targets Ukraine in Single-Day Spearphishing Operation

  • LABScon25 Replay | Auto-Poking The Bear: Analytical Tradecraft In The AI Age
    LABScon
    LABSconOct 9, 2025

    LABScon25 Replay | Auto-Poking The Bear: Analytical Tradecraft In The AI Age

  • Prompts as Code & Embedded Keys | The Hunt for LLM-Enabled Malware
    AI Research
    Alex DelamotteSep 19, 2025

    Prompts as Code & Embedded Keys | The Hunt for LLM-Enabled Malware

  • Contagious Interview | North Korean Threat Actors Reveal Plans and Ops by Abusing Cyber Intel Platforms
    Adversary
    Aleksandar MilenkoskiSep 4, 2025

    Contagious Interview | North Korean Threat Actors Reveal Plans and Ops by Abusing Cyber Intel Platforms

  • Smart Contract Scams | Ethereum Drainers Pose as Trading Bots to Steal Crypto
    Crimeware
    Alex DelamotteAug 5, 2025

    Smart Contract Scams | Ethereum Drainers Pose as Trading Bots to Steal Crypto

  • Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem
    Advanced Persistent Threat
    Jim WalterAug 4, 2025

    Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem

  • China’s Covert Capabilities | Silk Spun From Hafnium
    Advanced Persistent Threat
    Dakota CaryJul 30, 2025

    China’s Covert Capabilities | Silk Spun From Hafnium

  • macOS NimDoor | DPRK Threat Actors Target Web3 and Crypto Platforms with Nim-Based Malware
    Advanced Persistent Threat
    Phil StokesJul 2, 2025

    macOS NimDoor | DPRK Threat Actors Target Web3 and Crypto Platforms with Nim-Based Malware

  • Follow the Smoke | China-nexus Threat Actors Hammer At the Doors of Top Tier Targets
    Advanced Persistent Threat
    Aleksandar MilenkoskiJun 9, 2025

    Follow the Smoke | China-nexus Threat Actors Hammer At the Doors of Top Tier Targets