SentinelOne cuts malware analysis from weeks to hours

SentinelOne's Chief AI Officer Gregor Stewart reports that OpenAI's Daybreak can now produce human-level reverse-engineering output for sophisticated malware in roughly eight hours, compared with the four to six weeks a top security researcher would normally need. Daybreak gives defenders access to OpenAI models for cybersecurity work, and SentinelOne uses it to reverse engineer malware and examine software behavior. Faster analysis lets researchers investigate more samples and compare findings across them, revealing relationships between threats that isolated investigations might miss. Stewart describes this as "a kind of intelligence that we were never able to afford before" and says faster reverse engineering helps SentinelOne map a much larger part of the malware landscape and keep pace with how it changes. However, he stresses that his team remains accountable for outcomes: "The only thing that can't be automated is accountability." Decisions that change architecture still need human eyes, while point fixes or changes that do not fundamentally alter how software works may be better suited for automation. The capabilities also let more team members take on security work rather than relying on a small group of specialists. Stewart wants to bring OpenAI's cyber capabilities into code creation so SentinelOne developers can address security issues as they build, arguing that OpenAI is shifting the advantage to defenders by providing expert-level cyber capability to everyone in the development team.

(Source：OpenAI)