🔥 🟣 Purple AI is here and now generally available! To learn more about the industry’s leading AI security analyst, watch the video below.
👉 Ready to transform your security operations? Get a demo: sentinelone.com/platform/purpl…
Law enforcement executed a massive global crackdown on financial fraud, a new phishing service targeted Microsoft 365 with device-code tactics, and rival state-sponsored actors converged on Pakistani police networks.
This is the Good, Bad & Ugly. ⬇️
✅ GOOD
- Spanish
Engineered to secure your AI. Built to give you the S1 Advantage. Join SentinelOne at Black Hat, August 1-6, as we showcase the next generation of AI-driven defense.
Stop by booth 2933 to:
✅ Test your hunting skills in Mortal vs. Machine and go head-to-head with the Autonomous
China- and India-nexus threat actors have converged on a single Pakistani police force, seen as a rich source of intelligence for both nation-states. SentinelLABS latest research tracked multiple campaigns from February 2024 to April 2026.
Balochistan Police sits at a vertex,
US national AI infrastructure requires security controls designed for AI workloads.
The US Federal Government is committing $600 million to build one of the world's most advanced AI infrastructure systems. Executive Order 14363, the Genesis Mission, connects national laboratory
Long-running AI agents have a memory problem. Every turn produces useful information, but the weight of that additional context creates noise and increases costs.
The frontier labs answered with compaction. A summarization pass over prior agent actions that carries state forward
Law enforcement captured an Iranian cybercriminal and a core UNC3944 operative, Russian intelligence targeted Signal backup keys, and attackers breached a DHS information-sharing network.
This is the Good, Bad & Ugly. ⬇️
✅ GOOD
- Authorities apprehended a dual Iranian and
Call it what you want: Autonomous SOC, Agentic SOC, AI SOC.
The vision is the same. The reality varies wildly by organization and by team. As we said 18 months ago, the Autonomous SOC is a journey, not a destination. .
A lot has changed in those 18 months. Some core foundational
Endpoints are where most attacks start. IDC measured what effective endpoint protection is worth.
A new IDC Report measures what SentinelOne Singularity Endpoint delivers. IDC interviewed seven organizations across seven industries independently.
Inside the report:
- The
Five years ago, we started a conference with a single conviction: the research should speak for itself.
Five years later, we have our answer. A real research-led community.
@labscon_io 2026 is the final chapter, with the strongest program yet. Researchers, defenders, and the
Law enforcement dismantled malware and scam infrastructure, a North Korean macOS implant disrupted AI analysis tools, and attackers exploited two high-severity vulnerabilities in Cisco edge devices.
This is the Good, Bad & Ugly. ⬇️
✅ GOOD
- Authorities dismantled the Amadey
AI is reshaping both the threat landscape and how security teams respond. SentinelOne co-founder and CEO Tomer Weingarten joins @Bloomberg Intelligence analyst Mandeep Singh on Tech Disruptors to discuss securing AI agents, the role of LLMs in the modern SOC, and how M&A and
@LabsSentinel analyzed macOS.Gaslight, a DPRK-aligned Rust implant. It gaslights the AI reading the output.
Embedded inside the binary: a 3.5 KB prompt-injection payload. 38 fabricated "system" messages built to steer an LLM-assisted triage pipeline into aborting or refusing its
At the time of writing: 0/61 detections on VirusTotal.
The rest of the tradecraft is hardened:
- C2 runs over Telegram, AES-GCM encrypted, certificate-pinned TLS
- The bot token self-redacts, leaving only a placeholder in logs and crash artifacts
- Python stealer harvests
macOS.Gaslight uses a 38-message cascade that spoofs the triage harness's own prompt scaffold. The boundary blurs.
Anyone building LLM-assisted analysis pipelines: treat what you're triaging as adversarial input. Always.
Full analysis from SentinelLABS:
As a partner in @OpenAI's Daybreak Cyber Partner Program, SentinelOne is bringing GPT-5.5 into our offerings, starting with Wayfinder Frontier AI Services, to give security teams faster investigation, sharper prioritization, and earlier risk identification across the threats that