Pivoting through recently-reported indicators to find BlueNoroff-associated domains

Learn how DPRK's BlueNoroff group executed a Web3 macOS intrusion. Explore the attack chain, malware, and techniques in our detailed technical report.

In this month’s Tradecraft Tuesday, we talked about how threat actors are finetuning their macOS malware in order to maintain persistent access and avoid detection by Apple’s security features.

Remote US

Apple finally adds TCC events to Endpoint Security!

A widespread campaign with binaries written in different source languages, ReaderUpdate presents unique challenges for detection and analysis.

YouTube video by NDC Conferences

An in-depth hunt for Lazarus APT group infrastructure related to the Bybit hack using Validin's host response and DNS databases.

YouTube video by Objective-See Foundation

Level up your hacking and skills with this tech bundle from No Starch. Learn to protect yourself and others! Pay what you want & support charity!

Take a look at the open positions at SentinelOne. We're dedicated to defending enterprises across endpoints, containers, cloud workloads, and IoT devices in a single cybersecurity platform.