SentinelOne Labs
labs.sentinelone.com · Company blog · on HN since 2019
SentinelOne's security research team publishes malware analysis and vulnerability findings on firmware, Windows, macOS, wipers and ransomware groups.
What HN saysHN commenters cite its reports directly, such as the Dell driver flaw and the TrickBot group analysis, as the primary source for those stories.
17HN people shared it
2linked it in comments
20stories submitted
589story points
5 years agolast shared
2019people per year2026
Most-shared posts
- 1Dell patches 12-year-old driver vulnerability impacting millions of PCs2 people · 193 points · first shared 2021 · 40 comments on HN
- 2Moving from Common-Sense Knowledge About UEFI to Dumping UEFI Firmware2 people · 64 points · first shared 2020 · 7 comments on HN
- 316 Years in Hiding – Millions of Printers Worldwide Vulnerable2 people · 31 points · first shared 2021 · 2 comments on HN
- 4Privilege Escalation Vulnerability in Windows RPC Protocol2 people · 5 points · first shared 2021 · discussion on HN
- 5From Wiper to Ransomware – The Evolution of Agrius2 people · 3 points · first shared 2021 · discussion on HN
- 6Anchor project bridging the gap between Crimeware and Nation State2 people · 1 points · first shared 2019 · discussion on HN
- 7Bypassing macOS TCC user privacy protections by accident and design1 people · 159 points · first shared 2021 · 32 comments on HN
- 8A wiper attack paralyzed the Iranian train system1 people · 121 points · first shared 2021 · 66 comments on HN
- 9New macOS Malware XcodeSpy Targets Xcode Developers with EggShell Backdoor1 people · 3 points · first shared 2021 · discussion on HN
- 10Leveraging Ld_audit to Beat the Traditional Linux Library Preloading Technique1 people · 2 points · first shared 2020 · discussion on HN
- 11Peer into an attack server utilized by TrickBot actors1 people · 2 points · first shared 2020 · discussion on HN
- 12Moving from Manual Reverse Engineering of UEFI Modules to Dynamic Emulation Of1 people · 1 points · first shared 2020 · discussion on HN
- 13ThunderCats Hack the FSB – Your Taxes Didn’t Pay for This Op1 people · 1 points · first shared 2021 · discussion on HN
- 14Threat Intel Update – Cyber Attacks Leveraging the Covid-19/CoronaVirus Pandemic1 people · 1 points · first shared 2020 · discussion on HN
- 15DPRK Hidden Cobra Update: North Korean Malicious Cyber Activity1 people · 1 points · first shared 2020 · discussion on HN
What HN people wrote when they linked it
mzs · 2019-12-11
report itself: https://labs.sentinelone.com/the-deadly-planeswalker-how-the-trickbot-…
martey · 2021-05-04
From the security company's report at https://labs.sentinelone.com/cve-2021-21551-hundreds-of-millions-of-de… :
> The firmware update driver component, which is responsible for Dell Firmware Updates via the Dell Bios Utility, comes pre-installed on most Dell machines running Windows and freshly installed Windows machines that have been updated.
Dell's security advisory page (https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-c… suggests that it would be installed if you installed any of a number of their update programs:
> This driver file may have been installed on your Dell Windows operating system when you used firmware update utility packages, Dell Command Update, Dell Update, Alienware Update, Dell System Inventory Agent, or Dell Platform Tags, including when using any Dell notification solution to update drivers, BIOS, or firmware for your system.