Insights from the Front Lines of Cybersecurity

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from our Blog.

Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique

Stop PHP2Shell with SentinelOne. Learn how Singularity Agent stops web worker post-exploitation, kills process trees, and hunts threats.

The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)

U.S. courts sentence tax fraudster, Chinese-linked actors use agentic AI in cloud supply chain attack, and PHP issues warning of two critical-level RCE flaws.

Bring Your Own Vulnerable Driver: The Trust Gap Attackers Operate Inside

Uncover how BYOVD attacks exploit signing trust over disposable drivers, and why enforcing certificate revocation is essential for modern endpoint defense.

5 Years of SentinelOne ThreatOps: Defense from the Ground Up to Global Threat Championships

Celebrate five years of SentinelOne ThreatOps! Discover how a 2020 sketch evolved into a global movement training 19,000+ defenders ahead of OneCon 2026.

Keep up with the latest

All Blog Posts

macOS
25 nov 2019
macOS Red Team: Spoofing Privileged Helpers (and Others) to Gain Root
From the Front Lines
21 nov 2019
Smoke Loader Malware - An Easy Guide 101
From the Front Lines
20 nov 2019
Build Your Own Ransomware (Project Root) | Behind Enemy Lines Part 2
Data Platform
19 nov 2019
Getting Started Quickly With Dart Logging
Data Platform
19 nov 2019
Introducing the Scalyr Grafana Plugin
For CISO/CIO
18 nov 2019
The Education Sector and the Increasing Threat from Cybercrime
From the Front Lines
14 nov 2019
YARA Hunting for Code Reuse: DoppelPaymer Ransomware & Dridex Families
macOS
13 nov 2019
Privilege Escalation | macOS Malware & The Path to Root Part 2
For CISO/CIO
12 nov 2019
Stop the Churn, Avoid Burnout | How To Keep Your Cybersecurity Personnel
Data Platform
12 nov 2019
Navigating DevOps Conflicts: Who Owns What?
For CISO/CIO
11 nov 2019
Cybersecurity Strategy: The Quest for Visibility & Hunting
From the Front Lines
7 nov 2019
From "RobbinHood" to APT28: Crimeware Virus & APT Journey

All Things AI

SentinelOne and NVIDIA: Governing AI From Silicon to Runtime

Read why effective AI governance demands tamperproof, hardware-rooted security controls that autonomous agents cannot reach, bypass, or rewrite at runtime.

Why the SOC Can't Run on Vibes

Evaluate the buy, build-with, and DIY spectrum for AI in the SOC to balance operational control with ongoing maintenance needs.

The SOC Just Gained a Capability It Never Had

Agentic investigation is the shift your SOC could never staff. Here is how the always-on AI, the evolved analyst, and the expert on call now fit together.

SentinelOne + Claude: Integrations for AI Visibility, Governance, and Defense

Learn how SentinelOne empowers modern enterprises to safely adopt Claude with Prompt Security, AI SIEM, and Wayfinder Frontier AI.

Insights from the Front Lines of Cybersecurity

Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique

The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)

Bring Your Own Vulnerable Driver: The Trust Gap Attackers Operate Inside

5 Years of SentinelOne ThreatOps: Defense from the Ground Up to Global Threat Championships

All Blog Posts

macOS Red Team: Spoofing Privileged Helpers (and Others) to Gain Root

Smoke Loader Malware - An Easy Guide 101

Build Your Own Ransomware (Project Root) | Behind Enemy Lines Part 2

Getting Started Quickly With Dart Logging

Introducing the Scalyr Grafana Plugin

The Education Sector and the Increasing Threat from Cybercrime

YARA Hunting for Code Reuse: DoppelPaymer Ransomware & Dridex Families

Privilege Escalation | macOS Malware & The Path to Root Part 2

Stop the Churn, Avoid Burnout | How To Keep Your Cybersecurity Personnel

Navigating DevOps Conflicts: Who Owns What?

Cybersecurity Strategy: The Quest for Visibility & Hunting

From "RobbinHood" to APT28: Crimeware Virus & APT Journey

All Things AI

SentinelOne and NVIDIA: Governing AI From Silicon to Runtime

Why the SOC Can't Run on Vibes

The SOC Just Gained a Capability It Never Had

SentinelOne + Claude: Integrations for AI Visibility, Governance, and Defense

Get the Latest From the SentinelOne Blog