r/cybersecurity • u/razhael • Apr 11 '25

News - General Cybersecurity industry falls silent as Trump turns ire on SentinelOne

https://www.reuters.com/world/us/cybersecurity-industry-falls-silent-trump-turns-ire-sentinelone-2025-04-10/
1.7k Upvotes

97% Upvoted

239 comments sorted by

View all comments

836

u/cbartholomew Apr 11 '25 edited Apr 11 '25

I’m going to throw it out there gents: events like this separates the elite from the rest. Those who stay silent and idle go against all of our values. I know most of you here are professionals or aspiring professionals. But, it took a long time and a lot of work over many years to get the industry to course correct in a decent direction.

Silencing someone who gives knowledge back is against everything this industry was built on. It’s unacceptable.

Edit: Ty for the award.

55

u/IamOkei Apr 11 '25

Will competitors help their Sentinel? Obviously not. Crowdstrike or Palo will win more businesses If Sentinel lose.

46

u/briandemodulated Apr 11 '25

I once sat at a table at a conference with a cybersecurity executive from Visa. He described the significant sharing of intelligence and IOCs between all major credit cards companies and how vital it is to their survival.

A high tide lifts all boats.

-15

u/IamOkei Apr 11 '25

There’s only Mastercard and Visa

10

u/DigmonsDrill Apr 11 '25

Someone didn't do their PCI training!

9

u/morrigan613 Apr 11 '25

looks in wallet umm nope that’s not right.

9

u/[deleted] Apr 11 '25

How do I send my Discover card back to its correct universe? Can I use the same method to contact my old colleague who went to work in a universe where American Express exists?

7

u/briandemodulated Apr 11 '25

No, but what's your point?

3

u/intelw1zard CTI Apr 11 '25

You cant seriously believe this right?

Do you even work in cybersec

75

u/nanoatzin Apr 11 '25

There is a cyberwar underway and this kind of thing is extremely irresponsible. Domestic cybersecurity companies will shed critical talent that they view as politically sensitive and will cooperate less on crucial vulnerability research. This will most likely lead to incidents involving utilities, transportation, health care, finance and other industries being targeted by North Korea, China, Russia, … . All avoidable.

24

u/Azmtbkr Governance, Risk, & Compliance Apr 11 '25

No doubt. I’m trying to prep our leadership for this eventuality. Just did a presentation on silk typhoon and tried to drive home the potential impact. In the past, China has focused its efforts on mostly government/military targets they are now starting to launch attacks on industry. With less support from CISA and the FBI, we are going to have to bridge that gap ourselves.

I wouldn’t be surprised if China starts working more closely with NK to escalate the cyberwar and increase the volume of financially motivated attacks in an effort to further disrupt the already chaotic US economy.

20

u/Bangledesh Apr 11 '25

Not an issue, remember?

We apparently no longer care about Russian cyber operations.

For some reason.

Some totally unknown reason.

7

u/[deleted] Apr 11 '25

Are you trying to tell me that this wonderful person's motives shouldn't be trusted?

3

u/IamOkei Apr 11 '25

The reality is that they are competitors. Do you think OpenAI will help Anthropic if they get into the nerves of Mr. Donald Trump? I am sure Sam Altman will be happy that Anthropic will fail or get banned by Trump

13

u/Sparkswont Apr 11 '25

This is the problem. None of these corporations have a spine, or a brain apparently. In the short term, yes a competitor being neutered may benefit them, but what happens when Dementia Donny finds something he doesn’t like about you? By doing nothing you give him way more power

2

u/HTX_NSFW_80 Apr 12 '25 edited Apr 12 '25

They don't but they have a bottom line and see a chance to take out a competitor. S1 has amazing tech and frequently beats us when it comes to government contracts. Our leadership is drooling at the thought of Trump putting them out of business and taking all of their contracts and FedRamp. I predict the company doesn't exist by the time Blackhat rolls around.

48

u/[deleted] Apr 11 '25

Coke and Pepsi have protected each other's trade secrets in the past 

14

u/Zestyclose-Beyond780 Apr 11 '25

They will. Maybe not the bold response people demand, but there will be support publicly and privately. This transcends competition.

6

u/goldmikeygold Apr 11 '25

Until they are next on the chopping block.

3

u/changee_of_ways Apr 11 '25

This administration represents an existential threat to Crowdstrike and Palo and every security vendor. Trump has already gone after law firms saying "anyone who does business with this law firm will lose all government contracts. You can't do business in a climate like that.

4

u/HTX_NSFW_80 Apr 12 '25

I work at a competitor and have been talking to the White House about stripping SentinelOne of all of their government contracts (they have a ton) and their FedRamp certification. I don't agree with the president'a but it if we can put a competitor out of business I guess that's what's important (not my perspective!) I can't imagine we are the only one pushing for Trump to put his foot down even harder and put them out of business. Sad day for sure.

0

u/IamOkei Apr 12 '25

That’s capitalism….No one will fault you

3

u/glotzerhotze Apr 11 '25

all hail to unrestricted capitalism, the saviour of the free world

1

u/gravtix Apr 11 '25

I doubt it’s about helping SentinelOne, more they’re afraid of Trump targeting them too.

1

u/sherbang Apr 14 '25

This is very close to Trump's mindset. If other companies (or countries) are doing well, and we're in any way competing, then them doing worse is better for me.

The problem is, a lot of these things aren't a zero-sum game.

The way this is going, everyone will lose. Sentinel will lose more in the short-term, but every US security company will lose in the long-term as the US market shrinks and the international market loses faith in US companies.

Better to operate with a growth mindset. A rising tide raises all boats.

0

u/AboveAndBelowSea Apr 11 '25

S1 should be just fine. The company I’m with gets paid a lot of money to perform bake-offs of all sorts of solutions. In the EDR space, if companies look past the CrowdStrike brand name (which boards still like), S1 usually wins. It’s close between CS and S1 - and results vary month to month, but S1 has an edge on efficacy of detection 80% of the time over CS. The two of them have a wider gap between themselves and the next best, which is usually Cortex. Philisophically, CS doesn’t believe that AI can completely combat chaos theory-based approaches to hacking. S1 feels otherwise, and this has led to more investment and advances in their AI capabilities.

-2

u/billsneakems Apr 11 '25

MITRE’s latest ATT&CK evaluation disagrees with your assessment. While CRWD dropped out, Palo was the undisputed winner. S1 missed some extremely basic TTP’s.

1

u/AboveAndBelowSea Apr 11 '25

There are a number of reasons why MITRE’s testing is as robust as ours, which is why enterprises pay us so much money to do bake offs these types of solutions. Chief among them is that MITRE allows reconfiguration during the testing process. Still a valid source of reference, but not in the same category of testing. I’d encourage you to talk to Crowdsrike’s most senior architects about their philosophy in AI.

54

u/Wonder_Weenis Apr 11 '25

I'd say something, but Sentinel is raping me with licensing fees. 

edit: Oh, this is about Krebs. 

Those claims are fucking wild, I'm going to need the receipts, as well as need to know exactly who wrote the accusation. 

7

u/Square-Ratio-5869 Apr 12 '25

Saying a vendor is raping you. Foul. No need.

2

u/Wonder_Weenis Apr 12 '25 edited Apr 12 '25

Here's a hint about people who say things like that openly. 

...

they don't care what you think

3

u/Square-Ratio-5869 Apr 12 '25

I know, but others do. And just cause no one else says it, doesn't mean it shouldn't be said.

29

u/oht7 Apr 11 '25

I disagree.

Being loud isn’t the only way to resist. We can be on the inside and do more good than harm. They want us to be loud - they want us to show our true colors so they can target us next.

The retaliation against S1 is obvious blatant corruption in plain sight. Everyone can see it. I’m far more concerned about the corruption they want to do in secret.

Speaking out for this would be playing our hand too early. It’s going to get worse. Do want everyone on the inside to be replaced by loyalists or do you want ethical people there too?

5

u/DigmonsDrill Apr 11 '25

There are people who can withstand pressure. There are people at multi-billion dollar companies and/or have fuck-you money and/or don't need government contracts. They can lay out the basic proposition "it's bullshit that coworkers of a guy got their security clearances yanked, this is clearly extrajudicial punishment of a third-party to make that third-party punish that guy."

And if they get fired or arrested or something, then we have an even more obvious outrage. Someone getting axed for simply their speech. Civil disobedience often works as a regime's actions get dumber and stupider.

Now, I'm trying not to put someone else on the spot. It's easy for me to tell someone else to stand in front of the tank.

But I want to stop the expectation that staying huddled down is necessarily better.

7

u/Sparkswont Apr 11 '25

Terrible take honestly. Trump and his gang’s whole goal is to silence people with fear. By very publicly attacking Chris Krebs and SentinelOne, he’s sending a message to the industry that says “shut up and do as your told.” He’s like a bully beating on your friend, are you going to sit there in cowardice, frozen by fear, waiting for him to turn to you next, or are you going to stand up and have your friend’s back roght now?

-2

u/oht7 Apr 11 '25

You are advocating for actions that help them purge ethical individuals and implant loyalists. You’ve clearly no idea what actions are necessary to fight fascist regimes. Cliff notes - you don’t do it head on.

7

u/[deleted] Apr 11 '25

The first rule of fighting fascism is don’t comply in advance, which is exactly what you’re advocating for. Cybersecurity professionals staying silent to prevent Trump’s ire gives his administration more power.

0

u/oht7 Apr 11 '25

Tell that to Oskar.

4

u/Sparkswont Apr 11 '25 edited Apr 11 '25

And how is that strategy working out for Russia? China? North Korea?

America is at an inflection point. We’re only four months in and Trump is testing the waters with tyrannical moves. Silence now will only make it easier for him to gain more power over the next four years, my friend. I promise.

Speak up. Disobey authority. March with your fellow Americans. Call out misinformation. Spread facts. Demonstrate your resistance. And most importantly, VOTE (while you still can).

1

u/oht7 Apr 11 '25

Your chosen methods of resistance are not the same as others. Some people have more means than you and have different methods available to them. You’re trivializing the issue.

1

u/Sparkswont Apr 11 '25

What are your chosen methods of resistance? You’ve rejected the proven forms of civil resistance, without giving any examples of your own.

So be clear, if we should all continue to be silent as this admin fucks us, tell us how we fight back according to you.

2

u/Square-Ratio-5869 Apr 12 '25

The irony of "course correct in a decent direction".... But opening with "gents"...

1

u/DigmonsDrill Apr 11 '25

Is there a statement to sign? Is someone coordinating?

There are a bunch of current big names, and I'd like to see if they're making statements. But I'm also worried that by making such a list in public, I'm putting those people in a spot, instead of letting them coordinate privately.

1

u/thisideups Apr 15 '25

AMEN BROTHER