SentinelOne

🔥 🟣 Purple AI is here and now generally available! To learn more about the industry’s leading AI security analyst, watch the video below. 👉 Why Purple AI? Because it’s unlike anything available on the market: 💪 Early adopters report that Purple AI makes threat hunting and investigations 80% faster.  🧠 Translates natural language into sophisticated PowerQueries.  💨 Speed and visibility with lightning fast-queries with one console, one platform, and the industry’s most-performant data lake.  🔎 One-click threat hunting quickstarts, suggested next queries for deeper investigations, and intelligent summaries and shareable investigation notebooks. 👉 Ready to transform your security operations?  Get a demo: https://s1.ai/Purple-AI

🏆 Purple AI has won the CyberScoop 50 2024 Innovation of the Year Award!  This solution was chosen by voters for the transformative change it is driving in cybersecurity. Our generative AI security analyst is revolutionizing cybersecurity by empowering security teams to: 🔍 Automate threat detection and response 🚀 Detect and respond to threats 80% faster 🤖 Work smarter and boost productivity This recognition underscores our commitment to pushing the boundaries of what's possible in cybersecurity and helping our customers defend against the most brazen adversaries and their sophisticated attacks. We’re honored and will continue to use AI as a force for good to combat evil doers. 🗞️To learn more, read the press release: https://s1.ai/CyberSC-50

🧠 Organizations opting for security platforms over stand-alone tools is “definitely more than a passing trend” in our industry, says 451 Research’s Scott Crawford, Research Director for Information Security. In the below video, #OneCon 2024 emcee Jason Duerden asks Scott to double-click to help you understand the pros and cons of a platform security strategy and what practitioners should be thinking about heading into 2025. 🤔

🎉 Congratulations SentinelOne Board Member Ana Pinczuk, M.Eng, EMTM, MSM for being recognized as one of BoardProspects's "100 Hispanic Board Members Making a Difference." Our heartfelt gratitude goes out to you for your leadership and advocacy in the cybersecurity industry and technology sectors. We are proud to have you on our Board of Directors! Thank you for your unwavering dedication to being a Force for Good. 💜

🛡️ "You are on the front lines [of modern warfare]. You think you're in IT security—it’s so much more than that," said SentinelOne’s Chris Krebs during #OneCon 2024. "You are [part of] a national security mission—and we are here to help you of course—But don’t just think about the 1s and 0s in managing a network."

👿🍎 We dubbed it NotLockBit for a reason: This latest macOS malware discovery appears to be an entirely different threat actor appropriating the name of a more notorious one. SentinelOne has discovered a set of related Mach-O samples in addition to the one reported on recently by other researchers. 📄 In a recent blog post by Phil Stokes, we provide indicators of compromise for this set of samples and discuss how they have changed across versions. Learn more: https://s1.ai/NotLockBit 🔮Future Expectations: The NotLockBit malware appears to be very much in development. For now, the threat actor’s AWS accounts have been removed and there are no known victims or distribution methods in the wild. All known samples of macOS.NotLockBit are blocked by SentinelOne Singularity. Given the amount of development that has gone into this threat so far, we would be surprised not to see more from this actor in the short to medium term. 🍏Ransomware on macOS: It remains a small and still unlikely threat, but it is apparent that threat actors have understood that the double extortion method that works so well on other platforms—essentially, infostealers combining with file lockers—is equally viable on Apple’s desktop platform. https://s1.ai/ran-no Regardless of whether the file encryption succeeds or not, or whether users have adequate backups, bad actors seek to profit from stolen victim data.

🗞️ Our weekly cybersecurity news roundup 👉 The Good: CISA proposes new measures to safeguard U.S. data and researchers release a recovery tool for Mallox ransomware. The Bad: macOS.NotLockBit ransomware exploits AWS S3 for data exfiltration. The Ugly: Fortinet's CVE-2024-47575 vulnerability is actively exploited in over 50 servers. 📄 To learn more, read the full blog post: https://s1.ai/GBU-wk43

👩💻 A day in the life of a DFIR (Digital forensics and incident response) leader, with SentinelOne bada** Drea London-Petter. Watch the #OneCon 2024 video below to learn how she and her team help keep organizations secure. 

🤩 Steve Wozniak. All the innovations with Purple AI. Singularity Hyperautomation. These are some of our top moments at #OneCon 2024, the premier cybersecurity event of the year. See you at OneCon 2025. 💜 🎟️ Learn more here: onecon.io