The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • LABScon24 Replay | The Ransomware Trust Paradox
    LABScon
    LABSconDec 19, 2024

    LABScon24 Replay | The Ransomware Trust Paradox

  • LABScon24 Replay | Let Them Eat Cake: “Secure by Upgrade” Software is a National Security Threat
    LABScon
    LABSconDec 18, 2024

    LABScon24 Replay | Let Them Eat Cake: “Secure by Upgrade” Software is a National Security Threat

  • Operation Digital Eye | Chinese APT Compromises Critical Digital Infrastructure via Visual Studio Code Tunnels
    Advanced Persistent Threat
    Aleksandar MilenkoskiDec 10, 2024

    Operation Digital Eye | Chinese APT Compromises Critical Digital Infrastructure via Visual Studio Code Tunnels

  • LABScon24 Replay | PKfail: Supply-Chain Failures in Secure Boot Key Management
    LABScon
    LABSconDec 3, 2024

    LABScon24 Replay | PKfail: Supply-Chain Failures in Secure Boot Key Management

  • LABScon24 Replay | A 30-Year Journey from Compilation Student to Decompilation Pioneer
    LABScon
    LABSconNov 26, 2024

    LABScon24 Replay | A 30-Year Journey from Compilation Student to Decompilation Pioneer

  • CyberVolk | A Deep Dive into the Hacktivists, Tools and Ransomware Fueling Pro-Russian Cyber Attacks
    Crimeware
    Jim WalterNov 25, 2024

    CyberVolk | A Deep Dive into the Hacktivists, Tools and Ransomware Fueling Pro-Russian Cyber Attacks

  • DPRK IT Workers | A Network of Active Front Companies and Their Links to China
    Adversary
    Tom HegelNov 21, 2024

    DPRK IT Workers | A Network of Active Front Companies and Their Links to China

  • BlueNoroff Hidden Risk | Threat Actor Targets Macs with Fake Crypto News and Novel Persistence
    Advanced Persistent Threat
    Raffaele SabatoNov 7, 2024

    BlueNoroff Hidden Risk | Threat Actor Targets Macs with Fake Crypto News and Novel Persistence

  • Cloud Malware | A Threat Hunter's Guide to Analysis, Techniques and Delivery
    Security Research
    Alex DelamotteOct 24, 2024

    Cloud Malware | A Threat Hunter's Guide to Analysis, Techniques and Delivery

  • China’s Influence Ops | Twisting Tales of Volt Typhoon at Home and Abroad
    Security & Intelligence
    Dakota CaryOct 16, 2024

    China’s Influence Ops | Twisting Tales of Volt Typhoon at Home and Abroad

  • Kryptina RaaS | From Unsellable Cast-Off to Enterprise Ransomware
    Crimeware
    Jim WalterSep 23, 2024

    Kryptina RaaS | From Unsellable Cast-Off to Enterprise Ransomware

  • LABScon23 Replay | They Spilled Oil in My Health-Boosting Smoothie
    LABScon
    LABSconSep 5, 2024

    LABScon23 Replay | They Spilled Oil in My Health-Boosting Smoothie