The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
LC26_Mickens_ftr.jpg

LABScon26 Replay | Keynote: A Sober Analysis of AI Impact

Harvard Professor James Mickens weighs the promises of AI against its potential harms, arguing for hardware-based mechanisms to isolate frontier models.

Read More
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More

All SentinelLABS Posts

  • Use of Obfuscated Beacons in ‘pymafka’ Supply Chain Attack Signals a New Trend in macOS Attack TTPs
    Security & Intelligence
    Phil StokesMay 25, 2022

    Use of Obfuscated Beacons in ‘pymafka’ Supply Chain Attack Signals a New Trend in macOS Attack TTPs

  • CrateDepression | Rust Supply-Chain Attack Infects Cloud CI Pipelines with Go Malware
    Crimeware
    Juan Andrés Guerrero-SaadeMay 19, 2022

    CrateDepression | Rust Supply-Chain Attack Infects Cloud CI Pipelines with Go Malware

  • Putting Things in Context | Timelining Threat Campaigns
    Security Research
    Tom HegelMay 11, 2022

    Putting Things in Context | Timelining Threat Campaigns

  • Vulnerabilities in Avast And AVG Put Millions At Risk
    Security Research
    Kasif DekelMay 5, 2022

    Vulnerabilities in Avast And AVG Put Millions At Risk

  • Moshen Dragon’s Triad-and-Error Approach | Abusing Security Software to Sideload PlugX and ShadowPad
    Adversary
    Joey ChenMay 2, 2022

    Moshen Dragon’s Triad-and-Error Approach | Abusing Security Software to Sideload PlugX and ShadowPad

  • LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility
    Crimeware
    James HaughomApr 27, 2022

    LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility

  • Nokoyawa Ransomware | New Karma/Nemty Variant Wears Thin Disguise
    Crimeware
    Antonis TerefosApr 21, 2022

    Nokoyawa Ransomware | New Karma/Nemty Variant Wears Thin Disguise

  • Inside the Black Box | How We Fuzzed Microsoft Defender for IoT and Found Multiple Vulnerabilities
    Security Research
    Kasif DekelApr 13, 2022

    Inside the Black Box | How We Fuzzed Microsoft Defender for IoT and Found Multiple Vulnerabilities

  • AcidRain | A Modem Wiper Rains Down on Europe
    Adversary
    Juan Andrés Guerrero-SaadeMar 31, 2022

    AcidRain | A Modem Wiper Rains Down on Europe

  • Pwning Microsoft Azure Defender for IoT | Multiple Flaws Allow Remote Code Execution for All
    Security Research
    Kasif DekelMar 28, 2022

    Pwning Microsoft Azure Defender for IoT | Multiple Flaws Allow Remote Code Execution for All

  • Chinese Threat Actor Scarab Targeting Ukraine
    Adversary
    Tom HegelMar 24, 2022

    Chinese Threat Actor Scarab Targeting Ukraine

  • The Art and Science of macOS Malware Hunting with radare2 | Leveraging Xrefs, YARA and Zignatures
    Security Research
    Phil StokesMar 21, 2022

    The Art and Science of macOS Malware Hunting with radare2 | Leveraging Xrefs, YARA and Zignatures