SentinelOne DE Just another SentinelOne Sites
Cybersecurity Blog | SentinelOne SentinelOne’s blog offers the latest news around cybersecurity, risk reduction, threat intelligence, and more. Sign up for our weekly digest to stay updated.
- The Good, the Bad and the Ugly in Cybersecurity – Week 45 (2026)
by SentinelOne on November 6, 2026 at 6:30 pmAuthorities dismantle investment scams and cybercrime networks, scammers abuse Teams and AD CS, and cyberattacks disrupt European refrigeration systems.
- The Good, the Bad and the Ugly in Cybersecurity – Week 44 (2026)
by SentinelOne on October 30, 2026 at 5:29 pmPHP2SHELL’s complexity stalls mass exploitation, attackers chain it with Fragnesia to root firewalls, and a silent Brotli fix leaves Node2Shell exposed.
- Stopping Node2Shell: How SentinelOne Protects Customers From Brotli-Based Remote Code Execution
by SentinelOne on October 30, 2026 at 3:06 pmRead the breakdown on how the Node2Shell vulnerability in Google’s Brotli decoder enables remote code execution across Node.js, Bun, and .NET, and how to mitigate the risk.
- The Good, the Bad and the Ugly in Cybersecurity – Week 43 (2026)
by SentinelOne on October 23, 2026 at 5:18 pmU.S. courts sentence tax fraudster, Chinese-linked actors use agentic AI in cloud supply chain attack, and PHP issues warning of two critical-level RCE flaws.
- Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Techniqueby SentinelOne on October 21, 2026 at 7:21 pm
Stop PHP2Shell with SentinelOne. Learn how Singularity Agent stops web worker post-exploitation, kills process trees, and hunts threats.
- Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt
by Matt Berry on October 19, 2026 at 1:00 pmDiscover how detection teams can split EDR-killer attacks into four distinct behavior hunts to catch BYOVD and driverless threats before ransomware fires.
- How SentinelOne Blocked APT29’s CaptiveCrunch Campaign
by SentinelOne on October 16, 2026 at 6:01 pmLearn how SentinelOne’s Static AI blocked APT29’s CaptiveCrunch campaign on the endpoint, stopping local DNS poisoning and captive portal network lures.
- The Good, the Bad and the Ugly in Cybersecurity – Week 42 (2026)
by SentinelOne on October 16, 2026 at 5:31 pmAuthorities arrest cyber exec for extortion, cellular implant in Ledger wallets leaks seed phrases, and hackers heat French supermarket fridges to 50°C.
- Bring Your Own Vulnerable Driver: The Trust Gap Attackers Operate Insideby Matt Berry on October 13, 2026 at 4:40 pm
Uncover how BYOVD attacks exploit signing trust over disposable drivers, and why enforcing certificate revocation is essential for modern endpoint defense.
- Bring Your Own Vulnerable Driver: How EDR Killing Became an Industryby Matt Berry on October 13, 2026 at 4:18 pm
Discover how Bring Your Own Vulnerable Driver (BYOVD) tactics evolved from one-off hacker tools into a commercialized, tiered EDR-killer service economy.
