Code Purple by SentinelOne: April 2025 Edition

Welcome to the debut of Code Purple by SentinelOne – your inbox just got smarter. This newsletter will be your go-to source for the latest in cybersecurity news, emerging threats, and expert insights straight from some of the brightest minds in our industry. Whether you're a seasoned pro or new to the landscape, we've got you covered. For those of you who want a quick read between a coffee and your next sprint, get a quick byte here on what’s happening in the world of cyber defense. 

🔥 What’s Hot Right Now

Forbes | CVE Program Funding Reinstated – What it Means & What to do Next

Last week, just hours before funding for the CVE and CWE programs was set to expire, CISA renewed its agreement with MITRE, the federally funded research and development center that runs these important federal cybersecurity efforts. While near-term  funding was secured, the prospects of CVE and CWE losing federal support kicked off discussions in the stakeholder community on long-term sustainability of the programs, and what might be needed to ensure a more sustainable funding approach. Read more here.

Cloud Security Redefined | Introducing the next Generation of CNAPP

The next evolution of cloud security is here. Introducing the new Singularity™ Cloud Security: A complete CNAPP, powered by Generative and Agentic AI, in one unified platform. Learn more on our blog. 

Avoiding MCP Mania | How to Secure the Next Frontier of AI 

MCP is an innovative framework that connects LLMs to external tools and real-time data, but it can be a double-edged sword. Our latest blog post dives into how you can secure your MCP architecture, minimize the attack surface, and where SentinelOne can help. Check out the full blog here. 

🗞️ SentinelOne News

• What threats and risks are defining the present and impacting our future? Learn all the details in our annual threat hunting report, out now. Get the full report.

• SentinelOne is the leader and top-performing vendor for both Growth and Innovation in the 2025 Frost and Sullivan Radar™ for Endpoint. Singularity™ Endpoint earned best-in-class marks for performance, growth, and innovation. Read all the details. 

• A cybersecurity pulse check from the month of April:

Good: U.S. law enforcement seized over $8.2 million in stolen crypto from romance baiters and detained several SmokeLoader malware customers.

Bad: Threat actors exploited bugs in network access control (NAC) solutions to execute arbitrary code, spammed SMB websites using AI-powered frameworks, and abused popular presentation software to enhance their phishing campaigns. 

Ugly: New “WRECKSTEEL” malware is used to spy on Ukrainian government accounts while GRU-backed Gamaredon targets western military missions. China-nexus actor Mustang Panda launches an updated backdoor and new tools to bulk up their capabilities and evade detection.

Get the full scoop on our blog. 

📆 Upcoming Events

Join us at these upcoming events! Looking to connect in person? You can find us at:

• RSA: San Francisco (April 28 - May 1) Make sure you don’t miss out on all of the exciting activities we’ll have going on at RSAC.  Learn more and register to join us. 

• Livestream event - Just a Sec: Cybersecurity Unfiltered—Fast, Frank, and From the Front Lines (May 8 at 2pm (PT) - check local times in the event below): This isn’t your typical industry livestream. Each episode, we tackle the latest real-world incidents and intelligence. Our hosts discuss the most elusive adversaries, emerging hacking techniques, and the hidden forces shaping our digital world. Mark your calendars and register to join us.

• AWS Global Summits: We’re hitting 12 key cities across the Americas, Europe, the Middle East, and Asia-Pacific, bringing next-gen cloud security insights straight to you. Book your meeting now. 

Stay Connected

Hit subscribe and we’ll keep you up-to-date on all the latest happenings and developments in the world of cyber. Thank you for being part of our community! 

Make sure you also subscribe to our blog.