Blogsby GlyphNov 6
The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)
Authorities dismantle investment scams and cybercrime networks, scammers abuse Teams and AD CS, and cyberattacks disrupt European refrigeration systems.
SentinelOne Cybersecurity Blog the company blog of SentinelOne: latest posts and feed
SentinelOne · Company blog · 9.6 a month · 34 posts since Jul 24, 2026
Oct 30
Stopping Node2Shell: How SentinelOne Protects Customers From Brotli-Based Remote Code Execution
Read the breakdown on how the Node2Shell vulnerability in Google's Brotli decoder enables remote code execution across Node.js, Bun, and.NET, and how to mitigate the risk.
Oct 30
The Good, the Bad and the Ugly in Cybersecurity - Week 44 (2026)
PHP2SHELL’s complexity stalls mass exploitation, attackers chain it with Fragnesia to root firewalls, and a silent Brotli fix leaves Node2Shell exposed.
Oct 30
The Good, the Bad and the Ugly in Cybersecurity - Week 44 (2026)
PHP2SHELL’s complexity stalls mass exploitation, attackers chain it with Fragnesia to root firewalls, and a silent Brotli fix leaves Node2Shell exposed.
Oct 23
The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)
U.S. courts sentence tax fraudster, Chinese-linked actors use agentic AI in cloud supply chain attack, and PHP issues warning of two critical-level RCE flaws.
Oct 23
The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)
U.S. courts sentence tax fraudster, Chinese-linked actors use agentic AI in cloud supply chain attack, and PHP issues warning of two critical-level RCE flaws.
Oct 21
Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique
Stop PHP2Shell with SentinelOne. Learn how Singularity Agent stops web worker post-exploitation, kills process trees, and hunts threats.
Oct 19
Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt
Discover how detection teams can split EDR-killer attacks into four distinct behavior hunts to catch BYOVD and driverless threats before ransomware fires.
Oct 16
The Good, the Bad and the Ugly in Cybersecurity - Week 42 (2026)
Authorities arrest cyber exec for extortion, cellular implant in Ledger wallets leaks seed phrases, and hackers heat French supermarket fridges to 50°C.
Oct 16
How SentinelOne Blocked APT29's CaptiveCrunch Campaign
Learn how SentinelOne's Static AI blocked APT29's CaptiveCrunch campaign on the endpoint, stopping local DNS poisoning and captive portal network lures.
Oct 13
Bring Your Own Vulnerable Driver: How EDR Killing Became an Industry
Discover how Bring Your Own Vulnerable Driver (BYOVD) tactics evolved from one-off hacker tools into a commercialized, tiered EDR-killer service economy.
Oct 13
Bring Your Own Vulnerable Driver: The Trust Gap Attackers Operate Inside
Uncover how BYOVD attacks exploit signing trust over disposable drivers, and why enforcing certificate revocation is essential for modern endpoint defense.
Oct 9
The Good, the Bad and the Ugly in Cybersecurity - Week 41 (2026)
Suspected ShinyHunters member detained in Jordan, live operators phish MFA via fake AI ad portals, and attackers exploit an Atlassian flaw within.
Oct 9
5 Years of SentinelOne ThreatOps: Defense from the Ground Up to Global Threat Championships
Celebrate five years of SentinelOne ThreatOps! Discover how a 2020 sketch evolved into a global movement training 19,000+ defenders ahead of OneCon 2026.
Oct 2
The Good, the Bad and the Ugly in Cybersecurity - Week 40 (2026)
Ex-service members jailed and KillSec dismantled, suspected DPRK hackers drain $387M from Bitget, and a Pentagon breach exposes 3 million people.
Oct 2
The Good, the Bad and the Ugly in Cybersecurity – Week 39 (2026)
Ryuk access broker heads to prison, TraderTraitor backdoors surface on victim with no crypto ties, and one operator's AI agents skim 600K credit cards.
Sep 29
Building Agents Backwards from Evaluation
Learn why building reliable AI security agents requires co-designing modular system architectures alongside rigorous, domain-expert evaluation suites.
Sep 28
Bring Your Own Vulnerable Driver: The EDR Killer Economy
Discover how Bring Your Own Vulnerable Driver (BYOVD) tactics evolved from lone-operator tricks into a commercialized, tiered EDR-killer service economy.
Sep 28
Bring Your Own Vulnerable Device: The EDR Killer Economy
Discover how Bring Your Own Vulnerable Driver (BYOVD) tactics evolved from lone-operator tricks into a commercialized, tiered EDR-killer service economy.
Sep 28
SentinelOne and NVIDIA: Governing AI From Silicon to Runtime
Read why effective AI governance demands tamperproof, hardware-rooted security controls that autonomous agents cannot reach, bypass, or rewrite at runtime.
Sep 23
When Environment Variables Met Steganography: Inside a Reusable DCRat Delivery Chain
Learn how attackers combine environment variable staging and steganography in PNG files to deliver DCRat malware in memory.
Sep 18
The Good, the Bad and the Ugly in Cybersecurity – Week 38 (2026)
U.S. law enforcement extradites Black Axe leaders, emerging AI safety risks concern Frontier AI leaders, and autonomous OpenAI agents deploy proxy relays.
Sep 15
Why the SOC Can't Run on Vibes
Evaluate the buy, build-with, and DIY spectrum for AI in the SOC to balance operational control with ongoing maintenance needs.
Sep 11
The SOC Just Gained a Capability It Never Had
Agentic investigation is the shift your SOC could never staff. Here is how the always-on AI, the evolved analyst, and the expert on call now fit together.
Aug 28
The Good, the Bad and the Ugly in Cybersecurity – Week 35 (2026)
Authorities disrupt global cybercrime rings, attackers abuse DocuSign in NovaCookies phishing, and Spark RAT targets Cambodia with vulnerable drivers.
About this blog
SentinelOne's own blog, found on sentinelone.com by the daily check; not reviewed yet.
Posts per week, last 26 weeks
9.6 a month over the last six months (or since the feed's oldest post)
Posts by month
Writes about
Product and company (12), Security (10), AI and agents (6) in the last six months.