The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • JumpCloud Intrusion | Attacker Infrastructure Links Compromise to North Korean APT Activity
    Advanced Persistent Threat
    Tom HegelJul 20, 2023

    JumpCloud Intrusion | Attacker Infrastructure Links Compromise to North Korean APT Activity

  • Cloudy With a Chance of Credentials | AWS-Targeting Cred Stealer Expands to Azure, GCP
    Crimeware
    Alex DelamotteJul 13, 2023

    Cloudy With a Chance of Credentials | AWS-Targeting Cred Stealer Expands to Azure, GCP

  • LABScon Replay | Quiver – Using Cutting Edge ML to Detect Interesting Command Lines for Hunters
    LABScon
    LABSconJun 26, 2023

    LABScon Replay | Quiver – Using Cutting Edge ML to Detect Interesting Command Lines for Hunters

  • Automating String Decryption and Other Reverse Engineering Tasks in radare2 With r2pipe
    Security Research
    Phil StokesJun 21, 2023

    Automating String Decryption and Other Reverse Engineering Tasks in radare2 With r2pipe

  • LABScon Replay | Star-Gazing: Using a Full Galaxy of YARA Methods to Pursue an Apex Actor
    LABScon
    LABSconJun 12, 2023

    LABScon Replay | Star-Gazing: Using a Full Galaxy of YARA Methods to Pursue an Apex Actor

  • Kimsuky Strikes Again | New Social Engineering Campaign Aims to Steal Credentials and Gather Strategic Intelligence
    Advanced Persistent Threat
    Aleksandar MilenkoskiJun 6, 2023

    Kimsuky Strikes Again | New Social Engineering Campaign Aims to Steal Credentials and Gather Strategic Intelligence

  • Radare2 Power Ups | Delivering Faster macOS Malware Analysis With r2 Customization
    Security Research
    Phil StokesMay 31, 2023

    Radare2 Power Ups | Delivering Faster macOS Malware Analysis With r2 Customization

  • Operation Magalenha | Long-Running Campaign Pursues Portuguese Credentials and PII
    Adversary
    Aleksandar MilenkoskiMay 25, 2023

    Operation Magalenha | Long-Running Campaign Pursues Portuguese Credentials and PII

  • Kimsuky | Ongoing Campaign Using Tailored Reconnaissance Toolkit
    Adversary
    Aleksandar MilenkoskiMay 23, 2023

    Kimsuky | Ongoing Campaign Using Tailored Reconnaissance Toolkit

  • LABScon Replay | Does This Look Infected 2 (APT41)
    LABScon
    LABSconMay 18, 2023

    LABScon Replay | Does This Look Infected 2 (APT41)

  • LABScon Replay | Malshare: 10 Years of Running a Public Malware Repository
    LABScon
    LABSconMay 16, 2023

    LABScon Replay | Malshare: 10 Years of Running a Public Malware Repository

  • Hypervisor Ransomware | Multiple Threat Actor Groups Hop on Leaked Babuk Code to Build ESXi Lockers
    Crimeware
    Alex DelamotteMay 11, 2023

    Hypervisor Ransomware | Multiple Threat Actor Groups Hop on Leaked Babuk Code to Build ESXi Lockers