The biggest risk in your AI strategy? What quietly disappears when AI handles the work that builds expertise. Here are three questions to pressure-test your exposure👇

Adversaries are now industrializing the breach. SentinelOne’s new Annual Threat Report is officially out, and this is one of the key takeaways. Targeting core systems like identity, infrastructure, and automation is not new—but executing these tactics at an industrial scale is.

Want an AI malware analyst you can actually trust? @sentinellabs.bsky.social just built a multi-agent architecture that brings the rigor of human peer review to automated malware analysis. This Adversarial Consensus Engine doesn’t just “think,” but doubts. 🤔 🧵

$9 billion. That’s how much Crypto crime has amassed approximately in illicit funds. In this LABScon 2025 video, @privyio.bsky.social’s @andrewmohawk.bsky.social breaks down how attackers steal and launder billions through modern crypto ecosystems. 🧵👇

Looking for an internship in AI Cybersecurity? We’re running AI-driven security challenges at NEBULA:FOG's hackathon today. Join us: nebulafog.ai/challenges I’ll be there live giving updates.

It takes a human analyst an average of 41 minutes to process a single CTI report. An LLM typically does it in 3.3 minutes. Our latest @sentinellabs.bsky.social evaluation shows LLM-driven pipelines can process threat intel 18x faster than manual workflows. But there’s a catch. ⚠️ 🧵

What happens when the FortiGate next-generation firewall protecting your network becomes the backdoor? 🚪 Our DFIR team has been tracking a wave of FortiGate NGFW compromises. The worst part? Most organizations lack the log retention to see how it happened. 🧵👇

Engineered to secure your AI. Built to give you the advantage in the age of AI Security. SentinelOne’s Autonomous Security Intelligence is coming to #RSAC 2026. Connect with us onsite: https://s1.ai/RSAC-Cnct

And we're live! Join here on LinkedIn: www.linkedin.com/video/live/u...

What a US-Iran Conflict Really Means for Cyber: Tomorrow, @stonepwn3000.bsky.social, Drea London, @dakotaindc.bsky.social, and @hegel.bsky.social will discuss in this livestream. 📆 RSVP 📺 On YouTube: www.youtube.com/watch?v=45TF... 💼 And LinkedIn: www.linkedin.com/events/74223...

Everyone is studying ways to protect AI from data poisoning or prompt injections. But what happens when hackers target the AI controlling a robotaxi or a warehouse robot? 🤖🚗 s1.ai/Axs-PhyAI

The period of blind trust in AI agents is over, as it should be. Introducing ClawSec: The first open-source security suite built to harden OpenClaw agents against supply chain attacks and prompt injections. ⏬ Download from GitHub: s1.ai/ClwSec-GH 📄 Read the blog post: s1.ai/ClwSec-Bl

@reuters.com Exclusive: "The research, carried out jointly by SentinelOne and @censys.bsky.social ... offers a new window into the scale of potentially illicit use cases for thousands of open-source LLM deployments."

🧵 175,000+ exposed AI hosts. Zero guardrails. New research from @sentinellabs.bsky.social and @censys.bsky.social reveals a massive, unmanaged layer of open-source AI infrastructure operating in the shadows. s1.ai/si-llama Here is what you need to know about the "silent" AI network. ⤵️

🎬 We're live with the latest episode of Just a Sec, our cybersecurity briefing livestream with @stonepwn3000.bsky.social, @jags.bsky.social, @dakotaindc.bsky.social, and Drea London. Watch and your chat here: www.youtube.com/live/k0zJcfJ...

You don’t need expensive spy gear to see through hotel room walls. In this LABScon 2025 talk, @viss.hax.lol shows how off-the-shelf millimeter-wave radar can monitor hotel rooms and detect human presence through walls — even when someone is standing perfectly still.

LLM security benchmarks look impressive. They’re also misleading. @sentinellabs.bsky.social found that today’s LLM security benchmarks don’t measure real security work. 🧵 Read the full report: s1.ai/benchmk1

Why does “powershell” get blocked — but “power” + “shell” gets through? Why can a nonsense suffix like “::sda_!!” hijack a model’s attention? It’s not magic — it’s math. We trace the LLM attack surface from tokenization to attention. s1.ai/inside-llm-1

Last month, in our 2026 cyber forecast, @sentinellabs.bsky.social warned that a US–Venezuela flashpoint would spill into cyber and information ops, pulling in Russia, China, and Iran. A few days later, real-world events underscored how quickly those pressures can reshape the threat environment.

✅ #LLM literacy is table stakes for defenders, CTI analysts, and #cybersecurity professionals of all stripes now. Still looking for a way into this complex field? 🤔 LABS has got you covered! Start here: s1.ai/inside-llm-1 @sentinelone.com

Public sector cyber resilience in the AI era starts with trust. SentinelOne’s Singularity Platform-High has achieved GovRAMP Authorization. https://s1.ai/GovRAMP

In 2026, with Risky Business Media, we’re doing something a little bit different 💡 ▶️ How the World Got Owned is a historical look at hacking throughout the decades - 80s, 90s, 00s, 10s, 20s 🎧 Spotify - https://bit.ly/3N9BduD 🍎 Apple - https://apple.co/45ss9aw 🌐 RBM - https://bit.ly/49ygkky

2025 didn’t change cybercrime.It accelerated it. 📘 12 Months of Fighting Cybercrime — the @sentinellabs.bsky.social ABS 2025 Review: www.sentinelone.com/blog/12-mont...

AI isn’t reinventing ransomware — it’s industrializing it. That’s the core finding from new @sentinellabs.bsky.social research on how threat actors are actually using LLMs today. s1.ai/llm-rw

Adversaries scaled up. AI leveled up. And the SOC? It got a whole lot smarter. This is the year in AI security—wrapped. 🎁 Scroll down to see what made the 2025 highlight reel ⬇️

SentinelOne x AWS = co-innovation in action. At #AWSreInvent, we shared how we’re reducing complexity, accelerating adoption, and unifying security + innovation. Five new AI-powered integrations now live across AWS. Security without sprawl. Innovation without friction. 🚀

CyberVolk’s newest RaaS offering, VolkLocker, contains a curious design flaw: it stores its master encryption key in plaintext on victim systems. In new research from Jim Walter, he breaks down how such an oversight is a symptom of CyberVolk’s rapidly evolving RaaS operation. s1.ai/cybervolkret...

China’s notorious Salt Typhoon campaign started in an unexpected place: with two students in a Cisco training classroom. A new @sentinellabs.bsky.social report by @dakotaindc.bsky.social tells the full story. 🔗 s1.ai/MalAppr

We're live with the latest episode of our Just a Sec a livestream. 🎬 Watch and participate here: www.youtube.com/live/8UeXMUo...

Big news from AWS re:Invent 2025 👇 - We’ve launched new AI-powered cloud innovations: 🚀 AWS Security Hub → Singularity AI SIEM ⚡ Amazon CloudWatch Integration 🔐 One-Click AWS IAM Onboarding 🧠 Purple AI MCP Server on AWS Marketplace 📉 Observo AI in AWS GenAI Marketplace 🔗 https://s1.ai/RIV25-PR

What happens inside China’s cyber ranges doesn’t stay in simulation — it shapes real operations. China now operates one of the world’s largest cyber-range ecosystems, and it’s reshaping how the state develops offensive capability. s1.ai/LC25-DaBe

Adversaries move fast, but their infrastructure patterns betray them. Our new @vertexproject.bsky.social Synapse Rapid Power-Up for Validin, built in-house by @sentinellabs.bsky.social engineers and open-sourced, makes those patterns visible — and operational for analysts. s1.ai/sv-pwrup

In the era of AI, autonomy is evolving faster than security. That’s a gap SentinelOne is closing. From #OneCon. 🗣️ What Jags is saying: “We’ve essentially commoditized evaluative power — technology can now assess situations and make decisions autonomously. The question is: how do we secure that?”

🏆 Derek Render is our 2025 Sentinels League Threat Hunting World Champion 💜 🔥 📹 Live from #OneCon; From 10,000 game plays, across 100 countries, down 2 epic game nights. Congratulations to all of our finalists, Ethan, Arnau and Derek See you in 2026

Announced live at OneCon: How SentinelOne and AWS are teaming up to power the future of AI security. From protecting AI infrastructure to automating response, this is what’s next in autonomous cloud defense. https://s1.ai/AWS1Cn-PR A

🎬 Our Just a Sec livestream, live from OneCon2025. @stonepwn3000.bsky.social, @jags.bsky.social, and Drea London will be taking your questions. 📺 Watch here: www.youtube.com/live/4T7gT9J...

Behind the scenes, the future of AI Security is being built — by the teams and people shaping what’s next. 🎬 #OneCon 2025 kicks off in just a few hours. Follow along this week to see what happens when AI innovation meets human intelligence. https://t.co/hTOlKv4DGs https://t.co/vdaNpcoYFG

From 10,000 players to the final three. After months of qualifiers, regional finals, and mind-bending hunts, only the top three remain. s1.ai/S1-League

🚀 Two weeks. One mission. OneCon 2025. The wait’s almost over — and the agenda to the biggest SentinelOne event of the year is live. See what’s coming: keynotes, breakthrough product reveals, and a first look at the innovations defining the AI era of cybersecurity. 🔗 Register now: OneCon.io

🚨 6 months of prep. 1 day targeting Ukraine’s humanitarian networks including individuals from the @icrc.org, @unicef.org, and @nrc-global.bsky.social. New from @sentinellabs.bsky.social and the Digital Security Lab of Ukraine: A 1-day spearphishing operation, PhantomCaptcha: https://s1.ai/pcapt

🚨 Starting Soon 🚨 Get front-row access to @sentinellabs.bsky.social researchers unpacking one of the first cases of LLM-powered malware found in the wild. s1.ai/llm-mw 🧠 Our Just a Sec livestream starts at 12 p.m. PT—and we will be answering your questions. ⁉️

🧠 From LABScon 2025 to our Just a Sec Livestream. Get a window into one of @sentinellabs.bsky.social's latest discoveries: LLM-powered malware spotted in the wild. This Wednesday, Oct 15 • 12 p.m. PT.

AI as an Amplifier for Human Tradecraft: how scale can meet sharper intelligence. What’s New: In their #LABScon 2025 talk, @dreadnode.bsky.social's Brad Palm and @machinavelli.com show how agentic AI can explore every analytical pathway — at speed and scale.

🚫 You won’t remember the breach—because it never happened. In the AI era, SentinelOne is setting a new standard for cybersecurity with AI-powered protection that predicts, prevents, and stops threats before they ever start. 🔎 Take a Tour: https://bit.ly/3wd3Ij4 👉 Learn more: https://bit.ly/42LgMce

🔎 Attackers are embedding LLMs directly into malware, creating code that can generate malicious logic at runtime rather than embedded in code. 🔥New @sentinellabs.bsky.social research by @alex.leetnoob.com, @vkamluk.bsky.social, and Gabriel Bernadett-Shapiro at #LABScon 2025. 🔥 s1.ai/llm-mw

🔥 The Hottest Security Research in Real Time 🔥 #LABScon 2025 starts this Wednesday, bringing together the world’s leading researchers to share insights on malware, espionage, cybercrime economies, and the future of AI in security. s1.ai/LABScn-Bl Here’s a preview 🧵👇

🎬 It's live on Reddit! Ask @DakotaInDC anything! Join here: www.reddit.com/r/geopolitic...

🚨 Reddit AMA 🚨 @dakotaindc.bsky.social tracks how China builds its hacker pipeline—from campus and classrooms to command line. Ask him anything! 🗓 Sept 16 (ET) Set a reminder and join here: www.reddit.com/r/geopolitic...

🚨 LIVE WED 9/10 • 12 p.m. PT 🚨 The What & Why Decoded: APT29 using watering holes? 😱 Join us on LinkedIn, X and YouTube for our monthly Just a Sec livestream—and ask our threat researchers your questions. 📺 Youtube: https://bit.ly/4kWpbAb 📲 LinkedIn: https://bit.ly/3JUw8oi

Your cyber threat intel is part of the North Korean strategy: DPRK operators are abusing CTI platforms to see if they’ve been seen—and moving faster because of it. 👀