-
DEF CON is Coming to Singapore!
DEF CON is coming to Singapore! DEF CON and HTX will be co-organizing DEF CON SG, with CSIT as our strategic partner. Join us at the Marina Bay Sands April 28-30, 2026 for the full DEF CON experience: presentations, hands-on Villages, contests and musical entertainment. Bonus: 2-day DEF CON Training courses to level up your…
-
How Generative AI is Revolutionizing Application Security?
Software development is accelerating, and AI is helping drive that shift. Developers today use tools like GitHub Copilot, ChatGPT, and CodeWhisperer to generate code faster than ever. But that speed introduces a new challenge: reviewing and securing code at the same pace. As codebases grow and change rapidly, traditional security workflows are becoming a bottleneck.…
-
Top Tier Target | What It Takes to Defend a Cybersecurity Company from Today’s Adversaries
This report highlights a rarely-discussed but crucially important attack surface: security vendors themselves Executive Summary In recent months, SentinelOne has observed and defended against a spectrum of attacks from financially motivated crimeware to tailored campaigns by advanced nation-state actors. These incidents were real intrusion attempts against a U.S.-based cybersecurity company by adversaries, but incidents such…
-
How to Build Your Own MCP Server
In our previous blog post on Model Context Protocol (MCP), we explored the MCP, a lightweight JSON-RPC interface that standardizes communication between large language models (LLMs) and external data sources and tools through a client-server architecture. We discussed what MCP is and why it matters for LLM integration. Now, let’s get hands-on. In this blog…
-
DEF CON is Coming to Bahrain!
DEF CON started in Las Vegas, but we’ve become global with people attending from all over the world and there are local DEF CON Groups on 6 continents. After two successful events in China, we’ve been looking for more places to share our hacker spirit with the world. First up we will be dipping our…
-
AkiraBot | AI-Powered Bot Bypasses CAPTCHAs, Spams Websites At Scale
AkiraBot uses OpenAI to generate custom outreach messages to spam chat widgets and website contact forms at scale. Executive Summary AkiraBot is a framework used to spam website chats and contact forms en masse to promote a low-quality SEO service. SentinelLABS assesses that AkiraBot has targeted more than 400,000 websites and successfully spammed at least…
-
Cybersecurity Tips for Students Returning to School
Almost every teenager in the United States (approximately 96%) reports using the internet daily. As students prepare to return to school after the summer break, ensuring their cybersecurity practices are up to date is essential to protect personal information from increasingly sophisticated cyber threats. By teaching proactive cybersecurity measures, parents can empower their children to…
-
AI Cloud Architecture: A Deep Dive into Frameworks and Challenges
Integrating AI in cloud architecture has enabled businesses to handle AI/ML workloads effectively. The integration supports complex workloads that demand high computing power and complex hardware specifications to meet the dynamic and evolving demands of businesses. Although AI cloud architecture is transforming and driving the businesses to new levels, businesses face multiple challenges when they…
-
LABScon24 Replay | A Walking Red Flag (With Yellow Stars)
Dakota Cary and Eugenio Benincasa explore China’s CTF ecosystem, highlighting competitions held by the Ministry of State Security and the PLA. APT40 used CTFs at Hainan University to recruit hackers and source software vulnerabilities for operations. Jiangsu MSS received vulnerabilities from the Tianfu Cup. iSoon hosted their own CTF before their files were leaked on…
-
UK’s New Online Safety Act: What Consumers Need to Know
The UK’s digital landscape underwent its most significant transformation yet on Friday, July 25, 2025. The Online Safety Act 2023, seven years in the making, is now being fully enforced by Ofcom (the UK’s communications regulator). These new rules fundamentally change how British citizens access and interact with online content, with the primary goal of…