Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who's Exploiting Your Perimeter
SentinelOne, Wednesday, August 26th, 2026
A joint Tenable-SentinelOne study finds state and criminal groups converge independently on the same vulnerable edge infrastructure.
A new joint study by Tenable and SentinelOne combines two independent datasets to examine who is actually exploiting edge infrastructure.
The finding is that state-sponsored actors and financially motivated criminal groups converge on the same vulnerable edge devices independently of one another, rather than one category dominating.
That matters for how defenders reason about risk: treating edge exploitation as a nation-state problem leads organizations that consider themselves unlikely espionage targets to underweight it. The research draws on both companies' telemetry to establish the overlap.