What It Takes to Defend a Cybersecurity Company from Today's Adversaries

Heh, given the title I initially thought SentinelOne was addressing the Chris Krebs situation, and the adversary would be the current administration. But it&#x27;s about different nation state actors.<p>(context: <a href="https:&#x2F;&#x2F;www.cnbc.com&#x2F;2025&#x2F;04&#x2F;16&#x2F;former-cisa-chief-krebs-leaves-sentinelone-after-trump-exec-order.html" rel="nofollow">https:&#x2F;&#x2F;www.cnbc.com&#x2F;2025&#x2F;04&#x2F;16&#x2F;former-cisa-chief-krebs-leav...</a> )

It was an interesting read whilst having a cup of coffee. But rather shallow. A couple of mentions of some tools: goreshell, shadowpad, scatterbrain. It might be targeting C-suite folks more than analysts or other security folks. It is more about how you should be slightly afraid to do it on your own and better hire sentinelone to help you.

It’s RSA time so expect lot of cybersecurity posts

I tuned in late to this show. Are they down to tHe DPRK because they already successfully rooted out the MOSSAD, CIA and NSA insiders in previous episodes?

About 7GB of RAM, in my experience

Is there any way to recognize adversary IT workers? Not many companies have the capabilities of cybersecurity experts

The excess use of — within this really screams &quot;I Used ChatGPT to write&#x2F;rewrite this&quot;.

I am glad they don&#x27;t have to pay for training - rule 1,2 and 3 - keep your overheads low.

You just <i>can&#x27;t</i> secure something like Windows, Linux, MacOS, because it&#x27;s faulty by design. Any business that claims to be able to do so is selling snake oil.<p>Capability based operating systems <i>can</i> be made secure. Data diodes are a proven strategy to allow remote monitoring without the possibility of ingress of control. Between those two tools, you have a <i>chance</i> of useable and secure computing in the modern age, even against advanced threats.<p>Yeah... I feel like Cassandra, but here we are. You&#x27;ve been warned, yet again.

straight up, i always underestimate how much black market stuff runs alongside the official security game. you think closing those leaks really comes down to better tech or is it always just smarter people?

the key message to me was a reminder that setting up front companies to purchase security services and software for reverse engineering and competitive analysis is table stakes.<p>I knew it was common, even standard in some playbooks, but I always underestimate the parallel black market services economy.

&gt; Recent adversaries have included: DPRK IT workers posing as job applicants ransomware operators probing for ways to access&#x2F;abuse our platform Chinese state-sponsored actors targeting organizations aligned with our business and customer base<p>Thank god there were no Russians or Iranians. &#x2F;s