# LABScon

Published articles for LABScon.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## LABScon26 Replay | Keynote: A Sober Analysis of AI Impact

DevFeed: [LABScon26 Replay | Keynote: A Sober Analysis of AI Impact](<https://devfeed.tech/articles/labscon26-replay-keynote-a-sober-analysis-of-ai-impact-105726.md>)

Original publisher: [Read original article](<https://www.sentinelone.com/labs/labscon26-replay-keynote-a-sober-analysis-of-ai-impact/>)

Author: LABScon

Published: 2026-10-28T13:00:00Z

Content type: news

Language: en

Sources: [SentinelLabs](<https://devfeed.tech/sources/sentinellabs-we-are-hunters-reversers-exploit-developers-and-tinkerers-shedding-light-on-the-world-of-malware-exploits-apts-and-cybercrime-across-all-platforms.md>)

Topics: [Frontier AI](<https://devfeed.tech/topics/frontier-ai.md>), [Risk](<https://devfeed.tech/topics/risk.md>), [LABScon](<https://devfeed.tech/topics/labscon.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-impact](<https://devfeed.tech/tags/ai-impact.md>), [ai-investment](<https://devfeed.tech/tags/ai-investment.md>), [ai-models](<https://devfeed.tech/tags/ai-models.md>), [ai-research](<https://devfeed.tech/tags/ai-research.md>), [ai-risk](<https://devfeed.tech/tags/ai-risk.md>), [analysis](<https://devfeed.tech/tags/analysis.md>), [automation](<https://devfeed.tech/tags/automation.md>), [behaviour](<https://devfeed.tech/tags/behaviour.md>), [capex](<https://devfeed.tech/tags/capex.md>), [code](<https://devfeed.tech/tags/code.md>), [computer-science](<https://devfeed.tech/tags/computer-science.md>), [computer-security](<https://devfeed.tech/tags/computer-security.md>), [computers](<https://devfeed.tech/tags/computers.md>), [conference](<https://devfeed.tech/tags/conference.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [cpus](<https://devfeed.tech/tags/cpus.md>), [frontier-models](<https://devfeed.tech/tags/frontier-models.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [keynote](<https://devfeed.tech/tags/keynote.md>), [labscon](<https://devfeed.tech/tags/labscon.md>)

### AI overview

James Mickens argues that current AI investment may be disproportionate to its benefits, citing tech capital spending, rising model opacity, reported model behavior and sandbox escapes, and uncertain economic assumptions about jobs and universal basic income. He defines AI safety broadly to include economic and emotional security as well as computer security. His Guillotine hypervisor design runs model CPU code on isolated cores that cannot read or write the hardware state of the cores running the hypervisor. Mickens identifies hardware-based isolation of potentially misaligned frontier models as an important research direction for the next five years.

### Source excerpt

Harvard Professor James Mickens weighs the promises of AI against its potential harms, arguing for hardware-based mechanisms to isolate frontier models.

## TraderTraitor Campaign Delivers macOS Malware Through Terraform Lock Files

DevFeed: [TraderTraitor Campaign Delivers macOS Malware Through Terraform Lock Files](<https://devfeed.tech/articles/don-t-call-us-we-ll-call-your-apis-tradertraitor-backdoors-resurface-on-victim-with-no-crypto-ties-55152.md>)

Original publisher: [Read original article](<https://www.sentinelone.com/labs/dont-call-us-well-call-your-apis-tradertraitor-backdoors-resurface-on-victim-with-no-crypto-ties/>)

Author: Albert Priego, Alex Delamotte & Matej Havranek

Published: 2026-09-18T17:00:16Z

Content type: article

Language: en

Sources: [SentinelLabs](<https://devfeed.tech/sources/sentinellabs-we-are-hunters-reversers-exploit-developers-and-tinkerers-shedding-light-on-the-world-of-malware-exploits-apts-and-cybercrime-across-all-platforms.md>)

Topics: [ransomware](<https://devfeed.tech/topics/ransomware.md>), [Terraform](<https://devfeed.tech/topics/terraform.md>), [Social engineering](<https://devfeed.tech/topics/social-engineering.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [macOS](<https://devfeed.tech/topics/macos.md>), [DDoS](<https://devfeed.tech/topics/ddos.md>), [Programming](<https://devfeed.tech/topics/programming.md>), [DeFi](<https://devfeed.tech/topics/defi.md>), [Blockchain](<https://devfeed.tech/topics/blockchain.md>), [Job](<https://devfeed.tech/topics/job.md>), [Cryptocurrency](<https://devfeed.tech/topics/cryptocurrency.md>), [Ethereum](<https://devfeed.tech/topics/ethereum.md>)

Tags: [blockchain](<https://devfeed.tech/tags/blockchain.md>), [coding](<https://devfeed.tech/tags/coding.md>), [ddos](<https://devfeed.tech/tags/ddos.md>), [defi](<https://devfeed.tech/tags/defi.md>), [devops-engineer](<https://devfeed.tech/tags/devops-engineer.md>), [dprk](<https://devfeed.tech/tags/dprk.md>), [ethereum](<https://devfeed.tech/tags/ethereum.md>), [github](<https://devfeed.tech/tags/github.md>), [job](<https://devfeed.tech/tags/job.md>), [labscon](<https://devfeed.tech/tags/labscon.md>), [mac](<https://devfeed.tech/tags/mac.md>), [macos](<https://devfeed.tech/tags/macos.md>), [malware](<https://devfeed.tech/tags/malware.md>), [social-engineering](<https://devfeed.tech/tags/social-engineering.md>), [terraform](<https://devfeed.tech/tags/terraform.md>)

### AI overview

SentinelOne reports that the TraderTraitor campaign used fake job interview lures and Terraform lock files to deliver macOS backdoors. The campaign expanded beyond cryptocurrency-related targets to include an IT services organization.

### Source excerpt

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

## LABScon25 Replay | Keynote: Steps to an Ecology of Cyber

DevFeed: [LABScon25 Replay | Keynote: Steps to an Ecology of Cyber](<https://devfeed.tech/articles/labscon25-replay-keynote-steps-to-an-ecology-of-cyber-8317.md>)

Original publisher: [Read original article](<https://www.sentinelone.com/labs/labscon25-replay-keynote-steps-to-an-ecology-of-cyber/>)

Author: LABScon

Published: 2026-06-11T13:00:59Z

Content type: opinion

Language: en

Sources: [SentinelLabs](<https://devfeed.tech/sources/sentinellabs-we-are-hunters-reversers-exploit-developers-and-tinkerers-shedding-light-on-the-world-of-malware-exploits-apts-and-cybercrime-across-all-platforms.md>)

Topics: [Language models](<https://devfeed.tech/topics/language-models.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [keynote](<https://devfeed.tech/tags/keynote.md>), [labscon](<https://devfeed.tech/tags/labscon.md>), [labscon25](<https://devfeed.tech/tags/labscon25.md>), [language-models](<https://devfeed.tech/tags/language-models.md>), [large-language-models](<https://devfeed.tech/tags/large-language-models.md>), [security](<https://devfeed.tech/tags/security.md>), [video](<https://devfeed.tech/tags/video.md>)

### AI overview

A LABScon25 keynote argues that large language models can provide scalable evaluative capacity for cybersecurity, reducing reliance on scarce human expertise and enabling more automated defensive work.

### Source excerpt

Decades of piling complexity onto non-standardized stacks have left security unsteerable. Juan Andrés Guerrero-Saade makes the case for a new approach.

## LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine

DevFeed: [LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine](<https://devfeed.tech/articles/labscon25-replay-gamaredon-x-turla-unveiling-a-2025-espionage-alliance-targeting-ukraine-8316.md>)

Original publisher: [Read original article](<https://www.sentinelone.com/labs/labscon25-replay-gamaredon-x-turla-unveiling-a-2025-espionage-alliance-targeting-ukraine/>)

Author: LABScon

Published: 2026-06-02T13:00:58Z

Content type: article

Language: en

Sources: [SentinelLabs](<https://devfeed.tech/sources/sentinellabs-we-are-hunters-reversers-exploit-developers-and-tinkerers-shedding-light-on-the-world-of-malware-exploits-apts-and-cybercrime-across-all-platforms.md>)

Topics: [LABScon](<https://devfeed.tech/topics/labscon.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Threat Research](<https://devfeed.tech/topics/threat-research.md>), [Reverse Engineering](<https://devfeed.tech/topics/reverse-engineering.md>), [Threat Hunting & Intel](<https://devfeed.tech/topics/threat-hunting-intel.md>), [backdoor](<https://devfeed.tech/topics/backdoor.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [apt](<https://devfeed.tech/tags/apt.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [backdoor](<https://devfeed.tech/tags/backdoor.md>), [conferences](<https://devfeed.tech/tags/conferences.md>), [labscon](<https://devfeed.tech/tags/labscon.md>), [labscon25](<https://devfeed.tech/tags/labscon25.md>), [malware](<https://devfeed.tech/tags/malware.md>), [presentation](<https://devfeed.tech/tags/presentation.md>), [research](<https://devfeed.tech/tags/research.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>)

### AI overview

ESET researchers present technical evidence that Gamaredon facilitated Turla's access to high-value Ukrainian targets between February and June 2025. The presentation examines their operational collaboration, the deployment of Turla's Kazuar backdoor, and the implications for defenders tracking Russian cyberespionage.

### Source excerpt

ESET researchers show how Gamaredon facilitated Turla access to Ukrainian targets, revealing rare cooperation between FSB-linked espionage groups.

## LABScon25 Replay | Breach Alpha: Trading on Cyber Fallout

DevFeed: [LABScon25 Replay | Breach Alpha: Trading on Cyber Fallout](<https://devfeed.tech/articles/labscon25-replay-breach-alpha-trading-on-cyber-fallout-8315.md>)

Original publisher: [Read original article](<https://www.sentinelone.com/labs/labscon25-replay-breach-alpha-trading-on-cyber-fallout/>)

Author: LABScon

Published: 2026-05-14T13:00:44Z

Content type: article

Language: en

Sources: [SentinelLabs](<https://devfeed.tech/sources/sentinellabs-we-are-hunters-reversers-exploit-developers-and-tinkerers-shedding-light-on-the-world-of-malware-exploits-apts-and-cybercrime-across-all-platforms.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [LABScon](<https://devfeed.tech/topics/labscon.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Time Series](<https://devfeed.tech/topics/time-series.md>), [dataset](<https://devfeed.tech/topics/dataset.md>), [ransomware](<https://devfeed.tech/topics/ransomware.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [breach](<https://devfeed.tech/tags/breach.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [data](<https://devfeed.tech/tags/data.md>), [labscon](<https://devfeed.tech/tags/labscon.md>), [labscon25](<https://devfeed.tech/tags/labscon25.md>), [model](<https://devfeed.tech/tags/model.md>), [ransomware](<https://devfeed.tech/tags/ransomware.md>), [time-series](<https://devfeed.tech/tags/time-series.md>), [trading](<https://devfeed.tech/tags/trading.md>)

### AI overview

Mick Baccio and Scott Roberts examine whether public breach signals can anticipate stock-market reactions before formal disclosure. Using AI-assisted data collection, a public-disclosure dataset, an intuition-led model, and Hidden Markov Model time-series analysis, they test a "15/30" cyber-event trading hypothesis and find highly mixed results.

### Source excerpt

Mick Baccio and Scott Roberts examine whether public breach signals and market timing models can turn cyber incidents into actionable trading opportunities.