The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat 
Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • HelloKitty Ransomware Lacks Stealth, But Still Strikes Home
    Crimeware
    Jim WalterMar 9, 2021

    HelloKitty Ransomware Lacks Stealth, But Still Strikes Home

  • A Guide to Ghidra Scripting Development for Malware Researchers
    Security Research
    Marco FigueroaMar 4, 2021

    A Guide to Ghidra Scripting Development for Malware Researchers

  • 20 Common Tools & Techniques Used by macOS Threat Actors & Malware
    Security Research
    Phil StokesFeb 16, 2021

    20 Common Tools & Techniques Used by macOS Threat Actors & Malware

  • CVE-2021-24092: 12 Years in Hiding – A Privilege Escalation Vulnerability in Windows Defender
    Security Research
    Kasif DekelFeb 11, 2021

    CVE-2021-24092: 12 Years in Hiding – A Privilege Escalation Vulnerability in Windows Defender

  • Zeoticus 2.0 | Ransomware With No C2 Required
    Crimeware
    Jim WalterFeb 4, 2021

    Zeoticus 2.0 | Ransomware With No C2 Required

  • FADE DEAD | Adventures in Reversing Malicious Run-Only AppleScripts
    Security Research
    Phil StokesJan 11, 2021

    FADE DEAD | Adventures in Reversing Malicious Run-Only AppleScripts

  • Greyware’s Anatomy: The “Potentially Unwanted” are Upping Their Game
    Crimeware
    Mike DvorkinJan 8, 2021

    Greyware’s Anatomy: The “Potentially Unwanted” are Upping Their Game

  • Building a Custom Malware Analysis Lab Environment
    Security Research
    Marco FigueroaJan 4, 2021

    Building a Custom Malware Analysis Lab Environment

  • SolarWinds | Understanding & Detecting the SUPERNOVA Webshell Trojan
    Advanced Persistent Threat
    Marco FigueroaDec 24, 2020

    SolarWinds | Understanding & Detecting the SUPERNOVA Webshell Trojan

  • SolarWinds SUNBURST Backdoor: Inside the APT Campaign
    Advanced Persistent Threat
    James HaughomDec 19, 2020

    SolarWinds SUNBURST Backdoor: Inside the APT Campaign

  • Introducing SentinelOne’s Ghidra Plugin for VirusTotal
    Security Research
    Kasif DekelDec 15, 2020

    Introducing SentinelOne’s Ghidra Plugin for VirusTotal

  • APT32 Multi-stage macOS Trojan Innovates on Crimeware Scripting Technique
    Adversary
    Phil StokesDec 3, 2020

    APT32 Multi-stage macOS Trojan Innovates on Crimeware Scripting Technique