Everyone is studying ways to protect AI from data poisoning or prompt injections. But what happens when hackers target the AI controlling a robotaxi or a warehouse robot? 🤖🚗 s1.ai/Axs-PhyAI

The period of blind trust in AI agents is over, as it should be. Introducing ClawSec: The first open-source security suite built to harden OpenClaw agents against supply chain attacks and prompt injections. ⏬ Download from GitHub: s1.ai/ClwSec-GH 📄 Read the blog post: s1.ai/ClwSec-Bl

@reuters.com Exclusive: "The research, carried out jointly by SentinelOne and @censys.bsky.social ... offers a new window into the scale of potentially illicit use cases for thousands of open-source LLM deployments."

🧵 175,000+ exposed AI hosts. Zero guardrails. New research from @sentinellabs.bsky.social and @censys.bsky.social reveals a massive, unmanaged layer of open-source AI infrastructure operating in the shadows. s1.ai/si-llama Here is what you need to know about the "silent" AI network. ⤵️

🎬 We're live with the latest episode of Just a Sec, our cybersecurity briefing livestream with @stonepwn3000.bsky.social, @jags.bsky.social, @dakotaindc.bsky.social, and Drea London. Watch and your chat here: www.youtube.com/live/k0zJcfJ...

You don’t need expensive spy gear to see through hotel room walls. In this LABScon 2025 talk, @viss.hax.lol shows how off-the-shelf millimeter-wave radar can monitor hotel rooms and detect human presence through walls — even when someone is standing perfectly still.

LLM security benchmarks look impressive. They’re also misleading. @sentinellabs.bsky.social found that today’s LLM security benchmarks don’t measure real security work. 🧵 Read the full report: s1.ai/benchmk1

Why does “powershell” get blocked — but “power” + “shell” gets through? Why can a nonsense suffix like “::sda_!!” hijack a model’s attention? It’s not magic — it’s math. We trace the LLM attack surface from tokenization to attention. s1.ai/inside-llm-1

Last month, in our 2026 cyber forecast, @sentinellabs.bsky.social warned that a US–Venezuela flashpoint would spill into cyber and information ops, pulling in Russia, China, and Iran. A few days later, real-world events underscored how quickly those pressures can reshape the threat environment.

✅ #LLM literacy is table stakes for defenders, CTI analysts, and #cybersecurity professionals of all stripes now. Still looking for a way into this complex field? 🤔 LABS has got you covered! Start here: s1.ai/inside-llm-1 @sentinelone.com

Public sector cyber resilience in the AI era starts with trust. SentinelOne’s Singularity Platform-High has achieved GovRAMP Authorization. https://s1.ai/GovRAMP

In 2026, with Risky Business Media, we’re doing something a little bit different 💡 ▶️ How the World Got Owned is a historical look at hacking throughout the decades - 80s, 90s, 00s, 10s, 20s 🎧 Spotify - https://bit.ly/3N9BduD 🍎 Apple - https://apple.co/45ss9aw 🌐 RBM - https://bit.ly/49ygkky

2025 didn’t change cybercrime.It accelerated it. 📘 12 Months of Fighting Cybercrime — the @sentinellabs.bsky.social ABS 2025 Review: www.sentinelone.com/blog/12-mont...

AI isn’t reinventing ransomware — it’s industrializing it. That’s the core finding from new @sentinellabs.bsky.social research on how threat actors are actually using LLMs today. s1.ai/llm-rw

Adversaries scaled up. AI leveled up. And the SOC? It got a whole lot smarter. This is the year in AI security—wrapped. 🎁 Scroll down to see what made the 2025 highlight reel ⬇️

SentinelOne x AWS = co-innovation in action. At #AWSreInvent, we shared how we’re reducing complexity, accelerating adoption, and unifying security + innovation. Five new AI-powered integrations now live across AWS. Security without sprawl. Innovation without friction. 🚀

CyberVolk’s newest RaaS offering, VolkLocker, contains a curious design flaw: it stores its master encryption key in plaintext on victim systems. In new research from Jim Walter, he breaks down how such an oversight is a symptom of CyberVolk’s rapidly evolving RaaS operation. s1.ai/cybervolkret...

China’s notorious Salt Typhoon campaign started in an unexpected place: with two students in a Cisco training classroom. A new @sentinellabs.bsky.social report by @dakotaindc.bsky.social tells the full story. 🔗 s1.ai/MalAppr

We're live with the latest episode of our Just a Sec a livestream. 🎬 Watch and participate here: www.youtube.com/live/8UeXMUo...

Big news from AWS re:Invent 2025 👇 - We’ve launched new AI-powered cloud innovations: 🚀 AWS Security Hub → Singularity AI SIEM ⚡ Amazon CloudWatch Integration 🔐 One-Click AWS IAM Onboarding 🧠 Purple AI MCP Server on AWS Marketplace 📉 Observo AI in AWS GenAI Marketplace 🔗 https://s1.ai/RIV25-PR

What happens inside China’s cyber ranges doesn’t stay in simulation — it shapes real operations. China now operates one of the world’s largest cyber-range ecosystems, and it’s reshaping how the state develops offensive capability. s1.ai/LC25-DaBe

Adversaries move fast, but their infrastructure patterns betray them. Our new @vertexproject.bsky.social Synapse Rapid Power-Up for Validin, built in-house by @sentinellabs.bsky.social engineers and open-sourced, makes those patterns visible — and operational for analysts. s1.ai/sv-pwrup

In the era of AI, autonomy is evolving faster than security. That’s a gap SentinelOne is closing. From #OneCon. 🗣️ What Jags is saying: “We’ve essentially commoditized evaluative power — technology can now assess situations and make decisions autonomously. The question is: how do we secure that?”

🏆 Derek Render is our 2025 Sentinels League Threat Hunting World Champion 💜 🔥 📹 Live from #OneCon; From 10,000 game plays, across 100 countries, down 2 epic game nights. Congratulations to all of our finalists, Ethan, Arnau and Derek See you in 2026

Announced live at OneCon: How SentinelOne and AWS are teaming up to power the future of AI security. From protecting AI infrastructure to automating response, this is what’s next in autonomous cloud defense. https://s1.ai/AWS1Cn-PR A

🎬 Our Just a Sec livestream, live from OneCon2025. @stonepwn3000.bsky.social, @jags.bsky.social, and Drea London will be taking your questions. 📺 Watch here: www.youtube.com/live/4T7gT9J...

Behind the scenes, the future of AI Security is being built — by the teams and people shaping what’s next. 🎬 #OneCon 2025 kicks off in just a few hours. Follow along this week to see what happens when AI innovation meets human intelligence. https://t.co/hTOlKv4DGs https://t.co/vdaNpcoYFG

From 10,000 players to the final three. After months of qualifiers, regional finals, and mind-bending hunts, only the top three remain. s1.ai/S1-League

🚀 Two weeks. One mission. OneCon 2025. The wait’s almost over — and the agenda to the biggest SentinelOne event of the year is live. See what’s coming: keynotes, breakthrough product reveals, and a first look at the innovations defining the AI era of cybersecurity. 🔗 Register now: OneCon.io

🚨 6 months of prep. 1 day targeting Ukraine’s humanitarian networks including individuals from the @icrc.org, @unicef.org, and @nrc-global.bsky.social. New from @sentinellabs.bsky.social and the Digital Security Lab of Ukraine: A 1-day spearphishing operation, PhantomCaptcha: https://s1.ai/pcapt

🚨 Starting Soon 🚨 Get front-row access to @sentinellabs.bsky.social researchers unpacking one of the first cases of LLM-powered malware found in the wild. s1.ai/llm-mw 🧠 Our Just a Sec livestream starts at 12 p.m. PT—and we will be answering your questions. ⁉️

🧠 From LABScon 2025 to our Just a Sec Livestream. Get a window into one of @sentinellabs.bsky.social's latest discoveries: LLM-powered malware spotted in the wild. This Wednesday, Oct 15 • 12 p.m. PT.

AI as an Amplifier for Human Tradecraft: how scale can meet sharper intelligence. What’s New: In their #LABScon 2025 talk, @dreadnode.bsky.social's Brad Palm and @machinavelli.com show how agentic AI can explore every analytical pathway — at speed and scale.

🚫 You won’t remember the breach—because it never happened. In the AI era, SentinelOne is setting a new standard for cybersecurity with AI-powered protection that predicts, prevents, and stops threats before they ever start. 🔎 Take a Tour: https://bit.ly/3wd3Ij4 👉 Learn more: https://bit.ly/42LgMce

🔎 Attackers are embedding LLMs directly into malware, creating code that can generate malicious logic at runtime rather than embedded in code. 🔥New @sentinellabs.bsky.social research by @alex.leetnoob.com, @vkamluk.bsky.social, and Gabriel Bernadett-Shapiro at #LABScon 2025. 🔥 s1.ai/llm-mw

🔥 The Hottest Security Research in Real Time 🔥 #LABScon 2025 starts this Wednesday, bringing together the world’s leading researchers to share insights on malware, espionage, cybercrime economies, and the future of AI in security. s1.ai/LABScn-Bl Here’s a preview 🧵👇

🎬 It's live on Reddit! Ask @DakotaInDC anything! Join here: www.reddit.com/r/geopolitic...

🚨 Reddit AMA 🚨 @dakotaindc.bsky.social tracks how China builds its hacker pipeline—from campus and classrooms to command line. Ask him anything! 🗓 Sept 16 (ET) Set a reminder and join here: www.reddit.com/r/geopolitic...

🚨 LIVE WED 9/10 • 12 p.m. PT 🚨 The What & Why Decoded: APT29 using watering holes? 😱 Join us on LinkedIn, X and YouTube for our monthly Just a Sec livestream—and ask our threat researchers your questions. 📺 Youtube: https://bit.ly/4kWpbAb 📲 LinkedIn: https://bit.ly/3JUw8oi

Your cyber threat intel is part of the North Korean strategy: DPRK operators are abusing CTI platforms to see if they’ve been seen—and moving faster because of it. 👀

🔥 The hunt is on for the world’s ultimate threat hunter? 🔍 🛡️Introducing Sentinels League: The Threat Hunting World Championships 🛡️ 3 Rounds. 3 Regions. 3 Finalists. Only One World Champion.

@cyberscoop.bsky.social just named SentinelOne’s @dakotaindc.bsky.social a 2025 Most Inspiring Up & Comer. 🔖 Bookmark bait (in a good way): Here’s some of his recent work on China’s cyber ops and tech competition. 🧵

The future of cybersecurity is about harnessing AI, says @jags.bsky.social . 🎥 It’s a force multiplier for defenders: ✅ Training the next generation ✅ Upleveling skills in forensics, IR & malware analysis ✅ Scaling threat hunting

🚨 Black Hat... meet 'Just A Sec' 🖤 💜 🔥We are bringing our livestream show to the expo floor of Black Hat at SentinelOne Booth #3033 on Wednesday, Aug. 6 at 11 a.m. PT.

The Cyber Patents China Didn’t Want Us to Find… @sentinellabs.bsky.social has uncovered 10+ patents for highly intrusive forensics and data collection tools—filed by companies named in U.S. government indictments for working with the Chinese Hafnium (aka Silk Typhoon) APT group.

🚨 This Week in Cyber: The Good, the Bad, and the Ugly 🚨

🚨 SentinelOne Uncovers 3 Distinct Attack Clusters Targeting Microsoft SharePoint: As part of the “ToolShell” Zero-Day being exploited in-the-wild, our threat researchers have identified three distinct attack clusters, each with unique tradecraft and objectives.

Don't the miss the opportunity to speak at OneCon 2025. Submit your paper for consideration 🗣️ s1.ai/OneConCFC

💰 Credential Theft-as-a-Service? A new, turnkey infostealer is gaining traction fast—and it’s not just for sophisticated actors, with this malware’s "accessible" pricing and low barrier to entry.

🚨 New: @sentinellabs.bsky.social exposes NimDoor, a novel macOS malware used by DPRK threat actors to target Web3 and crypto 🧪 Bottom line: NimDoor reflects a leap in DPRK’s offensive toolkit, mixing compile-time trickery with native scripting to sidestep traditional defenses.