Insights from the Front Lines of Cybersecurity

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from our Blog.

Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique

Stop PHP2Shell with SentinelOne. Learn how Singularity Agent stops web worker post-exploitation, kills process trees, and hunts threats.

Bring Your Own Vulnerable Driver: The Trust Gap Attackers Operate Inside

Uncover how BYOVD attacks exploit signing trust over disposable drivers, and why enforcing certificate revocation is essential for modern endpoint defense.

5 Years of SentinelOne ThreatOps: Defense from the Ground Up to Global Threat Championships

Celebrate five years of SentinelOne ThreatOps! Discover how a 2020 sketch evolved into a global movement training 19,000+ defenders ahead of OneCon 2026.

Bring Your Own Vulnerable Driver: How EDR Killing Became an Industry

Discover how Bring Your Own Vulnerable Driver (BYOVD) tactics evolved from one-off hacker tools into a commercialized, tiered EDR-killer service economy.

Keep up with the latest

All Blog Posts

From the Front Lines
6 mar 2023
DBatLoader and Remcos RAT Sweep Eastern Europe
Cloud
3 mar 2023
CVE-2023-21839: Oracle WebLogic Server Core Patch Advisory
Cloud
3 mar 2023
CVE-2023-20052: ClamAV XXE Vulnerability
Company
2 mar 2023
Customer Value, Innovation, and Platform Approach: Why SentinelOne is a Gartner Magic Quadrant Leader
Company
2 mar 2023
The National Cybersecurity Strategy | How the US Government Plans to Protect America
macOS
1 mar 2023
Hunting for Honkbox | Multistage macOS Cryptominer May Still Be Hiding
For CISO/CIO
27 feb 2023
Navigating the CISO Reporting Structure | Best Practices for Empowering Security Leaders
Cloud
24 feb 2023
CVE-2022-47966: Zoho ManageEngine Vulnerability
Cloud
24 feb 2023
CVE-2022-39952: Fortinet FortiNAC Remote Code Execution Vulnerability
Cloud
24 feb 2023
CVE-2022-44877: CentOS Control Web Panel Unauthenticated RCE
Feature Spotlight
23 feb 2023
Feature Spotlight | Integrated Mobile Threat Detection with Singularity™ Mobile and Microsoft Intune
From the Front Lines
22 feb 2023
8220 Gang Cloud Threat: How to Investigate and Track?

All Things AI

SentinelOne and NVIDIA: Governing AI From Silicon to Runtime

Read why effective AI governance demands tamperproof, hardware-rooted security controls that autonomous agents cannot reach, bypass, or rewrite at runtime.

Why the SOC Can't Run on Vibes

Evaluate the buy, build-with, and DIY spectrum for AI in the SOC to balance operational control with ongoing maintenance needs.

The SOC Just Gained a Capability It Never Had

Agentic investigation is the shift your SOC could never staff. Here is how the always-on AI, the evolved analyst, and the expert on call now fit together.

SentinelOne + Claude: Integrations for AI Visibility, Governance, and Defense

Learn how SentinelOne empowers modern enterprises to safely adopt Claude with Prompt Security, AI SIEM, and Wayfinder Frontier AI.

Insights from the Front Lines of Cybersecurity

Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique

Bring Your Own Vulnerable Driver: The Trust Gap Attackers Operate Inside

5 Years of SentinelOne ThreatOps: Defense from the Ground Up to Global Threat Championships

Bring Your Own Vulnerable Driver: How EDR Killing Became an Industry

All Blog Posts

DBatLoader and Remcos RAT Sweep Eastern Europe

CVE-2023-21839: Oracle WebLogic Server Core Patch Advisory

CVE-2023-20052: ClamAV XXE Vulnerability

Customer Value, Innovation, and Platform Approach: Why SentinelOne is a Gartner Magic Quadrant Leader

The National Cybersecurity Strategy | How the US Government Plans to Protect America

Hunting for Honkbox | Multistage macOS Cryptominer May Still Be Hiding

Navigating the CISO Reporting Structure | Best Practices for Empowering Security Leaders

CVE-2022-47966: Zoho ManageEngine Vulnerability

CVE-2022-39952: Fortinet FortiNAC Remote Code Execution Vulnerability

CVE-2022-44877: CentOS Control Web Panel Unauthenticated RCE

Feature Spotlight | Integrated Mobile Threat Detection with Singularity™ Mobile and Microsoft Intune

8220 Gang Cloud Threat: How to Investigate and Track?

All Things AI

SentinelOne and NVIDIA: Governing AI From Silicon to Runtime

Why the SOC Can't Run on Vibes

The SOC Just Gained a Capability It Never Had

SentinelOne + Claude: Integrations for AI Visibility, Governance, and Defense

Get the Latest From the SentinelOne Blog