🚫 You won’t remember the breach—because it never happened. In the AI era, SentinelOne is setting a new standard for cybersecurity with AI-powered protection that predicts, prevents, and stops threats before they ever start. 🔎 Take a Tour: https://bit.ly/3wd3Ij4 👉 Learn more: https://bit.ly/42LgMce

🔎 Attackers are embedding LLMs directly into malware, creating code that can generate malicious logic at runtime rather than embedded in code. 🔥New @sentinellabs.bsky.social research by @alex.leetnoob.com, @vkamluk.bsky.social, and Gabriel Bernadett-Shapiro at #LABScon 2025. 🔥 s1.ai/llm-mw

🔥 The Hottest Security Research in Real Time 🔥 #LABScon 2025 starts this Wednesday, bringing together the world’s leading researchers to share insights on malware, espionage, cybercrime economies, and the future of AI in security. s1.ai/LABScn-Bl Here’s a preview 🧵👇

🎬 It's live on Reddit! Ask @DakotaInDC anything! Join here: www.reddit.com/r/geopolitic...

🚨 Reddit AMA 🚨 @dakotaindc.bsky.social tracks how China builds its hacker pipeline—from campus and classrooms to command line. Ask him anything! 🗓 Sept 16 (ET) Set a reminder and join here: www.reddit.com/r/geopolitic...

🚨 LIVE WED 9/10 • 12 p.m. PT 🚨 The What & Why Decoded: APT29 using watering holes? 😱 Join us on LinkedIn, X and YouTube for our monthly Just a Sec livestream—and ask our threat researchers your questions. 📺 Youtube: https://bit.ly/4kWpbAb 📲 LinkedIn: https://bit.ly/3JUw8oi

Your cyber threat intel is part of the North Korean strategy: DPRK operators are abusing CTI platforms to see if they’ve been seen—and moving faster because of it. 👀

🔥 The hunt is on for the world’s ultimate threat hunter? 🔍 🛡️Introducing Sentinels League: The Threat Hunting World Championships 🛡️ 3 Rounds. 3 Regions. 3 Finalists. Only One World Champion.

@cyberscoop.bsky.social just named SentinelOne’s @dakotaindc.bsky.social a 2025 Most Inspiring Up & Comer. 🔖 Bookmark bait (in a good way): Here’s some of his recent work on China’s cyber ops and tech competition. 🧵

The future of cybersecurity is about harnessing AI, says @jags.bsky.social . 🎥 It’s a force multiplier for defenders: ✅ Training the next generation ✅ Upleveling skills in forensics, IR & malware analysis ✅ Scaling threat hunting

🚨 Black Hat... meet 'Just A Sec' 🖤 💜 🔥We are bringing our livestream show to the expo floor of Black Hat at SentinelOne Booth #3033 on Wednesday, Aug. 6 at 11 a.m. PT.

The Cyber Patents China Didn’t Want Us to Find… @sentinellabs.bsky.social has uncovered 10+ patents for highly intrusive forensics and data collection tools—filed by companies named in U.S. government indictments for working with the Chinese Hafnium (aka Silk Typhoon) APT group.

🚨 This Week in Cyber: The Good, the Bad, and the Ugly 🚨

🚨 SentinelOne Uncovers 3 Distinct Attack Clusters Targeting Microsoft SharePoint: As part of the “ToolShell” Zero-Day being exploited in-the-wild, our threat researchers have identified three distinct attack clusters, each with unique tradecraft and objectives.

Don't the miss the opportunity to speak at OneCon 2025. Submit your paper for consideration 🗣️ s1.ai/OneConCFC

💰 Credential Theft-as-a-Service? A new, turnkey infostealer is gaining traction fast—and it’s not just for sophisticated actors, with this malware’s "accessible" pricing and low barrier to entry.

🚨 New: @sentinellabs.bsky.social exposes NimDoor, a novel macOS malware used by DPRK threat actors to target Web3 and crypto 🧪 Bottom line: NimDoor reflects a leap in DPRK’s offensive toolkit, mixing compile-time trickery with native scripting to sidestep traditional defenses.

And we're live. Watch @jags.bsky.social, @stonepwn3000.bsky.social, @dakotaindc.bsky.social, and Drea London-Petter—and ask your questions in the comments. www.youtube.com/live/MSuwHG-...

🤔 Why Coinbase’s $20M bounty matters—and what it says about threat actors, the state of bug bounties, and what’s next for defenders. Join us this Thursday for Episode 2 of Just a Sec.

🧪 A growing malware tactic socially engineers users into infecting themselves. It’s low-tech, high-impact—and it’s working. s1.ai/clickfix

🔥 The world's premier threat research conference is back. @labscon.bsky.social is Sept 17–20 in Scottsdale, AZ. Original research, invite-only, real impacts. Join top researchers from Google, Netflix, DARPA, SentinelLABS, and more at the event for cutting-edge threat intelligence.

📊 Here are the top threats of last year by operating system. Click the images to see the most active threats seen across our telemetry during 2024 for the three most popular business operating systems: Windows, macOS and Linux.

💰On Anti-Ransomware Day 2025, we unpack how Ransomware-as-a-Service has evolved over 10 years into a billion-dollar criminal enterprise. From TOX to LockBit, here’s how early affiliate models transformed into today’s polished cybercrime brands—and what the modern-day RaaS means for defenders.

🕵️ Trust, encryption, and economic stress are reshaping insider threats for commercial and government organizations. This challenge to long-standing assumptions about trust, access, and oversight is highlighted by two recent cases—the Rippling–Deel espionage case and “Signalgate.”

And we're live! Come join the fun. @jags.bsky.social, @stonepwn3000.bsky.social, @dakotaindc.bsky.social, and Drea London-Petter are taking live questions. www.youtube.com/live/1dyE82x...

Don't miss our first Just a Sec livestream in a few minutes. Catch us on LinkedIn, YouTube, and X at 2 p.m. PT.

letttssss goooooo.....check out a new livestream for fun

🚨 Phishing Re-Engineered for the Modern Internet—At-Scale: In research from @sentinellabs.bsky.social and Validin, we unveil at @pivotcon.bsky.social our report into a global crypto phishing operation abusing SEO, gen AI, and free-tier web services to drain digital wallets at an industrial scale.

📆 Just A Sec is almost here. In the first-ever episode of our new livestream series, @jags.bsky.social, @stonepwn3000.bsky.social, Drea London-Petter, and @dakotaindc.bsky.social discuss the hidden forces shaping our digital world.

🟣 🎙️Live from #RSAC 2025: A special, SentinelOne edition of the Risky Business Wide World of Cyber with SentinelOne’s @stamos.org and @stonepwn3000.bsky.social.

Love when we can talk about hoy dynamic the threat landscape actually is. The scope and scale of the DPRK IT workers effort alone surprised me as we worked it. Also love @sentinelone.com let us discuss this openly and viewed it as important to do so. www.sentinelone.com/labs/top-tie...

🧠 New from @sentinellabs.bsky.social ➡️ Cybersecurity vendors are actively defending a rarely-discussed but crucially important attack surface: themselves. By @hegel.bsky.social, @milenkowski.bsky.social, and Jim Walter

🇷🇺 🇨🇳 🇰🇵 🇮🇷 State-aligned actors are increasingly co-opting ransomware tactics to gain strategic advantages. SentinelOne’s @milenkowski.bsky.social joins other top researchers in this Virtual Routes report to dissect how Russia, China, North Korea, and Iran are reshaping the ransomware threat landscape.

🇨🇳 🗞️ Why did China choose now to publicly accuse three alleged NSA hackers? SentinelOne's China analyst, @dakotaindc.bsky.social, weighs in, saying to NBC News it's less about curbing hacking behavior and more about a propaganda win.

🤖 🔄 🌐 MCP is an innovative framework that connects LLMs to external tools and real-time data, but it can be a double-edged sword. Our latest blog post dives into how you can secure your MCP architecture, minimize the attack surface, and where SentinelOne can help. 📄 Read more: s1.ai/MCP-Mania

🚨 Sophisticated Spam Fueled by LLM-Generated Content: An AI-powered spam framework is targeting over 400,000 websites——successfully spamming 80,000+ of them across Shopify, Wix, Squarespace, and more. I

Cybersecurity, the work is mysterious and important. #severance

🔥⚔️ Presenting our Just A Sec livestream. In the first-ever episode on April 10 at 2 p.m. PT, @dakotaindc.bsky.social, Drea London, @jags.bsky.social, and @stonepwn3000.bsky.social discuss the hidden forces shaping our digital world.

⏰ 🧊 You don’t have to optimize your morning routine to optimize your SOC. Make your life easier with Purple AI—get the sleep you need. Learn more: s1.ai/Purple-AI

🍎🚨🕵️‍♂️ The notoriously elusive macOS malware, ReaderUpdate, is back — stealthier than ever. @philofishal.bsky.social and @syrion89.bsky.social uncover how ReaderUpdate Reforged blends Go, Crystal, Nim, and Rust into a potent mix.

🐴How eBPF runtime Cloud Security stops attacks like tj-actions (CVE-2025-3066), a trojan horse hidden in a trusted software component, integrated into over 23,000 software development projects ⬅️

👺🇷🇺 Hacktivisim meets cybercrime in Dragon RaaS, representative of an ongoing trend of hacktivist-style threat actors blending small-scale cyber attacks with aggressive branding.

👔The Hidden Cyber Risks of Mergers and Acquisitions: While M&As can fuel strategic expansion, driving an estimated third of revenue growth, they also harbor unseen cyber risk.

🚨 Our Weekly Cybersecurity Roundup 🚨

⚖️ CyberLaw Forum 2025: Top legal experts, cybersecurity professionals, and insurance leaders like Debevoise & Plimpton’s Luke Dembosky and U.S. Cyber Command’s executive director Morgan Adamski unpacked asymmetric cyber threats, AI attack tools, and supply chain risks.

🚨 Our Weekly Cybersecurity Roundup 🚨

🇨🇳 🌽 Who really owns America's farmland? In this LABScon Replay video, Kristin Del Rosso and Madeleine Devost dive into the secretive world of foreign investment in U.S. agricultural land, up 50% since 2017.

🚨 Our Weekly Cybersecurity Roundup 🚨

🇧🇾 🇺🇦 “Opposition activists in Belarus as well as Ukrainian military and government organizations are the target of a new campaign that employs malware-laced Microsoft Excel documents as lures to deliver a new variant of PicassoLoader.”

📆 Excited to see @axios.com spotlight cybersecurity with the "Zero Day" @netflix.com series. @thekrebscycle.bsky.social's participation in this conversation in D.C. this Wednesday adds critical insight into the current cyber threat and how government and industry team up to protect the nation.