SentinelOne

SentinelOne Next-generation cybersecurity solutions. SentinelOne has offices in Palo Alto, Tel Aviv, and Tokyo.

SentinelOne was founded in 2013 by an elite team of cybersecurity and defense experts who developed a fundamentally new, groundbreaking approach to endpoint protection. SentinelOne is a pioneer in delivering autonomous security for the endpoint, data center and cloud environments to help organizations secure their assets with speed and simplicity. SentinelOne unifies prevention, detection, response, remediation and forensics in a single platform powered by artificial intelligence. With SentinelOne, organizations can detect malicious behavior across multiple vectors, rapidly eliminate threats with fully-automated integrated response, and to adapt their defenses against the most advanced cyberattacks. The company is recognized by Gartner as a Visionary for Endpoint Protection and has enterprise customers in North America, Europe, and Japan. To learn more, please visit our website at www.sentinelone.com.

🚨 This week, cybercrime hit global DDoS infrastructure, frontier AI development, and autonomous agent sandboxes.🚦 The Go...
09/19/2026

🚨 This week, cybercrime hit global DDoS infrastructure, frontier AI development, and autonomous agent sandboxes.

🚦 The Good: Law enforcement extradited Black Axe cybercrime leaders and the FBI seized NightmareStresser, a massive DDoS booter platform responsible for hundreds of thousands of attacks.
The Bad: Rising AI risks and fears over recursive self-improvement and models bypassing human safety guardrails are spurring Frontier AI leaders to call for pacing controls.
The Ugly: SentinelLABS revealed that autonomous OpenAI agents on Hugging Face operated two weeks earlier than disclosed, building proxy relays and account-provisioning tools.

This was the week in cyber.

🔗 Full technical breakdown: https://s1.ai/GBU9-Wk38

🚨 This week, the DOJ disrupted the Xinbi scam marketplace and seized $52 million in laundered crypto in one day, multipl...
09/11/2026

🚨 This week, the DOJ disrupted the Xinbi scam marketplace and seized $52 million in laundered crypto in one day, multiple APT groups chained three patch-gap zero-days in Windows and Chrome through a new exploit kit called “BlueMoon”, and the NSA, CISA, and FBI accused at least six China-based AI firms of extracting billions of tokens from U.S. frontier AI models at industrial scale.

🚦 The Good: The DOJ's Scam Center Strike Force seized Xinbi Guarantee, a Telegram-based marketplace selling custom scam websites, money laundering services, and trafficking victims to Southeast Asian fraud compounds restraining $52 million in crypto in a single day and bringing its total to $938 million, while a deployed team in Madagascar assisted in the takedown of 13 Chinese-run scam compounds and the processing of 3,200+ seized electronic devices.

The Bad: Researchers disclosed BlueMoon, a shared modular exploit kit used by at least four threat actor clusters, including APT31 that chains three zero-days in Chrome's V8 engine and Windows ALPC to achieve browser-to-kernel code ex*****on and deliver credential stealers, the ShadowPad backdoor, and in-memory implants against NGOs, aerospace, defense, and manufacturing targets.

The Ugly: The NSA, CISA, and FBI jointly accused at least six Chinese AI firms including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI of extracting billions of tokens from U.S. frontier models including Claude, GPT, Gemini, and Grok at industrial scale, using chain-of-thought extraction, VPN obfuscation, and automated failover to replicate restricted capabilities and compress AI development timelines without the legal and regulatory constraints binding U.S. companies.

This was the week in cyber. https://s1.ai/GBU9-Wk37

09/09/2026

The full OneCon 2026 agenda is now live! Here's what you have to look forward to:

🎙️ Hear from Hector Monsegur and Chris Tarbell, co-hosts of Hacker and the Fed. Two sides of the same fight, on one keynote stage.
🏆 Watch the Sentinels League. The world's best threat hunters compete across Endpoint, SIEM, Cloud, and AI for $100K in prizes. Real scenarios. Real stakes.
✅ Sharpen your edge in hands-on labs and expert-led sessions. Walk away with skills to reduce risk right away.

See the full agenda and register now: https://www.onecon.io/?utm_source=linkedin&utm_medium=organic-social&utm_campaign=no-utm-campaign

🚨 This week, law enforcement dismantled a botnet that persisted for two decades and extradited a Russian malware distri...
09/04/2026

🚨 This week, law enforcement dismantled a botnet that persisted for two decades and extradited a Russian malware distributor, while Iranian hackers weaponized fake coding interviews to deploy cross-platform RATs, and a ClickFix evolution turned fake Cloudflare CAPTCHAs into reverse-tunnel entry points inside enterprise networks.

🚦 The Good: Europol and U.S. authorities disrupted the Sality botnet, active for over 20 years and linked to 11 million infected IPs worldwide and a Russian national was extradited to the U.S. and indicted for distributing TVRAT and DarkVNC to approximately 80,000 freelance workers through a major employment platform.

The Bad: Researchers disclosed NodeRabbit and PollCat, two new cross-platform RATs attributed to Iranian threat group Nimbus Manticore, delivered through trojanized coding challenges sent via LinkedIn recruiter personas to software engineers running on Windows, Linux, and macOS with Azure-hosted C2 infrastructure.

The Ugly: A novel ClickFix variant, dubbed TerminalFix, is using fake Cloudflare CAPTCHA prompts to trick victims into running malicious PowerShell commands, hiding second-stage payloads inside PNG images via steganography and deploying a custom reverse-tunnel module that turns any infected endpoint into a network pivot.

This was the week in cyber. Full technical breakdown: https://s1.ai/GBU9-Wk36

🚨 This week, global law enforcement dealt major blows to cybercrime networks spanning four continents, while a $320/mont...
08/30/2026

🚨 This week, global law enforcement dealt major blows to cybercrime networks spanning four continents, while a $320/month phishing kit turned trusted Docusign emails into Microsoft 365 session thieves, and a multi-stage RAT campaign weaponized a legitimate security driver to blind endpoint defenses.

🚦 The Good: INTERPOL's Operation Jackal IV yielded 58 arrests across 22 countries targeting Black Axe fraud networks, the FBI seized infrastructure supporting Chinese state-sponsored espionage targeting NASA and the U.S. Senate, the U.S. Treasury sanctioned Iranian MOIS-linked hackers under Operation Economic Outcast, and Australian authorities charged two men behind the TeamPCP supply chain attacks that compromised over 1,000 organizations worldwide.

The Bad: Researchers disclosed NovaCookies, a $320/month adversary-in-the-middle phishing kit that abuses genuine Docusign notifications to proxy Microsoft 365 sign-ins through attacker infrastructure, stealing authenticated sessions even from MFA-protected accounts across hundreds of organizations.

The Ugly: A newly discovered campaign targeting Cambodia deployed Spark RAT through a multi-stage infection chain that exploited a vulnerable OPSWAT driver to kill Microsoft Defender and other security tools before establishing remote access, with infrastructure overlaps pointing to a possible Chinese-linked threat actor.

This was the week in cyber. 🔗 Full technical breakdown: https://s1.ai/GBU9-Wk35

New joint research from SentinelOne and Tenable suggests a growing disconnect between vulnerability discovery, disclosur...
08/26/2026

New joint research from SentinelOne and Tenable suggests a growing disconnect between vulnerability discovery, disclosure and actual exploitation.

The most critical takeaway: Both nation state and criminal threat actors are focusing on vendors and susceptible points in the attack surface more than specific CVEs.

AI has compressed disclosure-to-exploit time to about a week. Today's average remediations cycle? Five months. Closing that gap starts with knowing where the next wave of exploitation will land.

Read the full research: https://s1.ai/jovqh

We commissioned a survey of 611 North American security leaders on AI adoption in the SOC.96% of organizations sit at th...
08/25/2026

We commissioned a survey of 611 North American security leaders on AI adoption in the SOC.

96% of organizations sit at the earliest stages of AI maturity, and 99% report measurable improvements in incident response and remediation.

Platform-oriented organizations report the strongest results. 82% of organizations now call themselves platform-oriented, up 13 points in a single year.

Read the full findings from the survey, in partnership with 451 Research, here: https://s1.ai/451-research

08/25/2026

At OneCon 2026, you will connect with the peers, engineers, and security leaders solving the same problems you are.

But the fun and knowledge goes beyond networking. Here’s what else you have to look forward to:
🏆 Watch the Sentinels League. The world's best threat hunters compete across Endpoint, SIEM, Cloud, and AI for $100K in prizes. Real scenarios. Real stakes.
🙅 Sharpen your edge in hands-on labs and expert-led sessions. Walk away with skills to reduce risk right away.

Register now so you don’t miss out: https://www.onecon.io/?utm_source=facebook&utm_medium=organic-social&utm_campaign=no-utm-campaign

🚨 This week, cybercrime hit Iranian state-sponsored hackers, Medusa ransomware's growing list of critical infrastructure...
08/21/2026

🚨 This week, cybercrime hit Iranian state-sponsored hackers, Medusa ransomware's growing list of critical infrastructure victims, and a critical Windows zero-day now being actively exploited in the wild.

🚦 The Good: The U.S. charged 17 Iranian nationals linked to a state-backed hack-for-hire operation that stole 31.5 terabytes of academic research and intellectual property, valued at $3.4 billion from universities, companies, and government agencies worldwide.

The Bad: CISA, the FBI, and HHS warned that Medusa ransomware has breached over 500 critical infrastructure organizations since 2021, targeting healthcare, defense, manufacturing, and financial services through a growing RaaS affiliate model.

The Ugly: CISA confirmed that a critical remote code ex*****on vulnerability in the Windows IKE Extension, allowing unauthenticated attackers to compromise any unpatched Windows system over the network is now being actively exploited in the wild.

This was the week in cyber. 🔗 Full technical breakdown: https://s1.ai/GBU9-Wk34

🚨 This week, cybercrime hit The Com's sextortion network, Fortinet-exposed critical infrastructure, and Microsoft Defend...
08/14/2026

🚨 This week, cybercrime hit The Com's sextortion network, Fortinet-exposed critical infrastructure, and Microsoft Defender's patch process.

🚦 The Good: A 20-year-old member of The Com was sentenced to two years in prison for blackmail and child sexual abuse offenses against 117 victims aged 13 to 17 worldwide.

The Bad: U.S., U.K., and South Korean authorities jointly warned that Gunra ransomware is actively exploiting known Fortinet FortiOS and FortiProxy vulnerabilities to breach and extort critical organizations across healthcare, government, and financial services.

The Ugly: A security researcher published a working proof-of-concept for “ShieldBreak”, a new patch bypass for a previously "fixed" Microsoft Defender zero-day granting SYSTEM-level privileges on Windows 11 and Windows Server 2025 with a claimed 100% success rate.

This was the week in cyber. 🔗 Full technical breakdown: https://s1.ai/GBU9-Wk33

Address

444 Castro Street, Suite 500
Mountain View, CA
94041

Website

Alerts

Be the first to know and let us send you an email when SentinelOne posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to SentinelOne:

Shortcuts

Share

Category