Top all-time · #736
SentinelOne
Company blog · sentinelone.com/blogsecurity
SentinelOne is the company blog at sentinelone.com, writing about security. Since 2015, 86 different Hacker News readers have linked it 119 times, most often “Malicious PDFs: Revealing the Techniques Behind the Attacks”. It is still writing: the last post was on 2026-10-30, and you can follow it by feed.
Rarely recommended · 2 of 40 sampled comments recommend it?
Why HN links it
HN readers link SentinelOne's vulnerability database and malware research posts, mostly as sources or examples for claims about PDF, macOS, ransomware and JIT security bugs.
Summarised by Claude from a sample of 40 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection — enhanced by our Security Data Lake for seamless and efficient cybersecurity.
Most-linked posts?
- Malicious PDFs: Revealing the Techniques Behind the Attacks5 people · 5 mentions · first linked 2019-11-08
- Fast16: High-Precision Software Sabotage 5 Years Before Stuxnet4 people · 4 mentions · first linked 2026-04-24
- /blog/what-happened-to-my-mac-apples-ocsp-apocalypse/3 people · 5 mentions · first linked 2021-06-14
- Reverse engineering and exploitation of a Little Snitch vulnerability3 people · 3 mentions · first linked 2016-07-22
- Investigating a malware sample which sometimes fails to behave maliciously3 people · 3 mentions · first linked 2016-09-24
- /vulnerability-database/cve-2026-10702/3 people · 3 mentions · first linked 2026-07-03
- /blog/osx-ironcore-a-or-what-we-know-about-osx-flashimitator-a/2 people · 2 mentions · first linked 2023-07-24
- macOS Ransomware: NotLockBit2 people · 2 mentions · first linked 2024-10-25
- macOS Malware Researchers – How to Bypass XProtect on Catalina2 people · 2 mentions · first linked 2020-03-10
- macOS Security – So How Do Macs Get Infected with Malware? – SentinelOne2 people · 2 mentions · first linked 2020-05-07
What Hacker News says?
https://www.sentinelone.com/vulnerability-database/cve-2026-...
Comment linking /vulnerability-database/cve-2026-102870/
on “PHP 8.2.35”Submitted What It Takes to Defend a Cybersecurity Company from Today's Adversaries as a story · 176 points
HN discussion> i.e. it doesn't "fail safe" by disallowing execution if the check doesn't go through. (If it did, you wouldn't be able to run anything without an internet connection!) Instead, these checks can pass, fail, or error out; and erroring out is the same as passing. (Or rather, technically, erroring out falls back to the last cached verification state, even if it's expired; but if there is no previous verification state…
Comment linking /blog/what-happened-to-my-mac-apples-ocsp-apocalypse/
on “M4 MacBook Pro”Submitted Apple’s macOS Ventura – New Security Changes as a story · 176 points
HN discussion> What is the political element in Germany that makes these very public walk away from Microsoft viable Germany has had a fairly active Linux community for decades. A large portion of German local government has had experience using or RFPing FOSS alternatives since the 2000s all the way back to Munich's bake off of Windows vs Linux. While the geopolitical portion is sexy and fun to look at, in most cases American v…
Comment linking /press/sentinelone-and-schwarz-digits-strategic-partnership/
on “The state of Schleswig-Holstein is consistently relying on open source”Submitted Investigating a malware sample which sometimes fails to behave maliciously as a story · 101 points
HN discussionNot OP, but JS engine JIT bugs are pretty common. https://phrack.org/issues/70/exploiting-logic-bugs-in-javasc... https://www.sentinelone.com/vulnerability-database/cve-2026-... https://projectzero.google/2020/09/jitsploitation-one.html https://www.zerodayinitiative.com/blog/2021/12/6/two-birds-w...
Comment linking /vulnerability-database/cve-2026-10702/
on “Python's experimental JIT to be removed”Submitted Reverse engineering and exploitation of a Little Snitch vulnerability as a story · 47 points
HN discussionHere's a demonstration of some example attacks using pdf: executing arbitrary js, and connecting to a samba server: https://www.sentinelone.com/blog/malicious-pdfs-revealing-te... I'm not sure about this attack specifically, though, and in Ronin's post mortem they aren't really talking about that: https://roninblockchain.substack.com/p/back-to-building-roni... . To some extent, the PDF viewer/OS doesn't matter. A de…
Comment linking /blog/malicious-pdfs-revealing-techniques-behind-attacks/
on “A fake job offer took down Axie Infinity”Submitted How Two Firefox Zero Days Led to Two macOS Backdoors as a story · 43 points
HN discussionWhile I don't think it's perfect, and I don't use it myself, but because it was mentioned in the GP comment I responded to, we can look at the security model of Qubes OS which doesn't rely on its developer to decide what can and can't run on the OS. Ideally, systems would be designed such that risks are minimized no matter where the app you want to run came from and no matter who signed it. Right now, that's how App…
Comment linking /blog/what-happened-to-my-mac-apples-ocsp-apocalypse/
on “macOS Nix setup: an alternative to Homebrew (2020)”Submitted Hacktivism and State-Sponsored Knock-Offs. Attributing Deceptive Hack Operations as a story · 35 points
HN discussionWe're all very impressed that you're such a 1337 h4x0r that you run Arch Linux and not Windo$e. See also https://www.sentinelone.com/blog/macos-notlockbit-evolving-r... and https://blog.sekoia.io/helldown-ransomware-an-overview-of-th...
Comment linking /blog/macos-notlockbit-evolving-ransomware-samples-suggest-a-threat-actor-sharpening-its-tools/
on “Many ransomware strains will abort if they detect a Russian keyboard installed (2021)”Submitted CrateDepression: Rust Supply-Chain Attack Uses Go Malware as a story · 27 points
HN discussionSentinelOne | Backend Developers | Remote (US) | Full-Time | https://sentinelone.com After the successful launch of the new Singularity Marketplace, I am looking for an engineer to join our small Apps engineering team in the United States. We want somebody that has been in the trenches working with medium/big systems, loves functional programming (even if is afraid to say that loudly) and has a solid API background.…
Comment linking /
on “Ask HN: Who is hiring? (April 2021)”Submitted Chris Krebs to Leave Sentinel One as a story · 25 points
HN discussionNo auto-play animations, no animations at all, no bizarre hijacking of scrolling... As annoying and obnoxious as animations and scrolljacking are, I prefer them to things like embedded viruses and SMB attacks that PDFs with embedded JS will happily run. https://www.sentinelone.com/blog/malicious-pdfs-revealing-te...
Comment linking /blog/malicious-pdfs-revealing-techniques-behind-attacks/
on “PDF: Still unfit for human consumption, 20 years later”Submitted Aoqin Dragon: Chinese-linked APT has been spying on organizations for 10 years as a story · 10 points
HN discussionOn the last point, PDFs can still embed first-party malware. E.g., https://www.sentinelone.com/blog/malicious-pdfs-revealing-te...
Comment linking /blog/malicious-pdfs-revealing-techniques-behind-attacks/
on “PDF: Still unfit for human consumption, 20 years later”Submitted Chinese threat actor scarab targeting Ukraine as a story · 8 points
HN discussionSentinelOne is hiring for a lot of roles in Distributed Systems, Cybersecurity, and AI. I think a lot of folks on here would be a fit. https://www.sentinelone.com/jobs/
Comment linking /jobs/
on “Ask HN: Who is hiring? (December 2024)”Submitted Unmasking I-Soon – The Leak That Revealed China's Cyber Operations as a story · 5 points
HN discussionSentinelOne | Backend Developers | Remote (US) | Full-Time | https://sentinelone.com After the successful launch of the new Singularity Marketplace, I am looking for an engineer to join our small Apps engineering team in the United States. We want somebody that has been in the trenches working with medium/big systems, loves functional programming (even if is afraid to say that loudly) and has a solid API background.…
Comment linking /
on “Ask HN: Who is hiring? (May 2021)”Submitted Targets: Russian Organizations Increasingly Under Attack by Chinese APTs as a story · 4 points
HN discussionYou'd think. https://www.sentinelone.com/vulnerability-database/cve-2026-...
Comment linking /vulnerability-database/cve-2026-28826/
on “Updates to Full Disk Access in macOS”Submitted CVE-2021-45608 – NetUSB RCE Flaw in Millions of End User Routers as a story · 4 points
HN discussionhttps://www.sentinelone.com/cybersecurity-101/cybersecurity/...
Comment linking /cybersecurity-101/cybersecurity/cia-triad/
on “Libxml2's "no security embargoes" policy”Submitted The Rise and Fall of Domain Fronting as a story · 4 points
HN discussion> Little Snitch is a malware vector, pretty much like PC "antivirus" software. Is that because the Little Snitch network capture parser can be exploited by magic/malformed network packets to gain kernel privileges? Are there known exploits that were previously patched? Do you recommend any alternative Mac firewall which doesn't have this problem? Can the native firewall perform outbound packet filtering? Edit: https…
Comment linking /blog/shut-snitch-reverse-engineering-exploiting-critical-little-snitch-vulnerability-reverse-engineering-mac-os-x/
on “The old guard of Mac indy apps has thrived for more than 25 years”Submitted Why the SoC Can't Run on Vibes as a story · 3 points
HN discussion
