Varonis Blog the company blog of Varonis: latest posts and feed

Oct 26

Varonis' Takeaways from Forrester’s 2026 Email, Messaging, and Collaboration Security Solutions Landscape Report

Forrester published a new report, The Email, Messaging, And Collaboration Security Solutions Landscape, Q4 2026, on October 23. Varonis Interceptor is among Forrester's overview of 26 notable vendors.

Oct 23

Go With the Flow: How a Shadow Dependency Led to a Cross-Tenant Vulnerability in GCP Dataflow

Oct 22

StealC Is Back, and This Time It's a RAT

In June, Europol tore down StealC, a prominent infostealer, as part of Operation Endgame. International authorities seized 326 servers and 142 domains, recovered more than 25 million stolen credentials from 385,000 infected machines, and...

Oct 22

PHP2Shell: One Upload, Full Server

How many servers are one malformed upload away from leaking your secrets?

Oct 20

Varonis and Collibra: Improving Data Governance for Trusted AI

As organizations move faster to integrate AI, datasets are connected to models, agents, and analytics pipelines based on their metadata and lineage. But pressing questions often go unanswered: what’s sensitive, and who has access to it?

Oct 17

Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQL

Varonis Threat Labs uncovered a remote code execution (RCE) vulnerability in Snowflake-managed PostgreSQL that turns an ordinary database privilege into control of the underlying server by chaining together legitimate features.

Oct 15

Varonis is joining Proofpoint

Today, we announced a definitive agreement under which Varonis will be acquired by Proofpoint, a global leader in human and agent security.

Oct 14

IBM’s Cost of a Data Breach Report 2026: AI Is Now the Attacker and the Target

Key takeaways AI-driven attacks rose 56% since last year's Report, with shadow AI incidents more than doubling to 43%. The majority of AI-related breaches (92%) involved no proper AI access controls, making access and governance gaps the...

Oct 7

Least Privilege for AI Agents: A Practical Guide for Security Leaders

Key takeaways Least privilege for AI agents gives each agent its own identity and only the access a specific task needs, for only as long as that task runs.

Oct 5

Access Governance: Reducing Attacker Reach in the Age of AI-Accelerated Threats

Key takeaways You won't patch your way out of AI-accelerated threats. Reducing attacker reach matters more than ever. Blast radius is the metric that matters. The less an identity can access, the less damage an attacker can do.

Sep 30

Varonis and Cohesity: Improving Cyber Resilience with Data Security

Backup datasets often contain sensitive information, from PII to intellectual property, and a wide range of business-critical data.

Sep 25

AI Security Fundamentals: The Real Industry Shift Taking Place

Key takeaways "Security for AI" isn't a distinct discipline. AI systems need the same governance, access controls, and monitoring as everything else in the stack.

Sep 23

Meet AvisLoader: A Windows Loader Built to Outlast a Takedown

Varonis Threat Labs recently discovered AvisLoader, a new Windows loader named after the Latin word for bird. We found it on an exposed staging server alongside a ClickFix lure, supporting tools, and its Command Center.

Sep 22

Introducing Varonis Triage Agent: An Autonomous Incident Responder to Amplify MDDR Service

Key takeaways The Varonis Triage Agent is an AI incident responder that investigates alerts like an analyst, gathering evidence and testing explanations. With the Triage Agent, MDDR analysts respond to malicious activity more quickly.

Sep 21

Varonis Named a Pace Setter in the September 2026 Gartner® Emerging Market Quadrant for AI Application Security

Varonis is proud to be named Pace Setter in the Gartner® Emerging Market Quadrant for AI Application Security, recognized for our approach to securing AI applications across the entire development and deployment lifecycle.

Sep 18

Teaching a Machine to Think Like an Incident Responder

Key takeaways The Varonis Triage Agent investigates alerts like an incident responder, forming hypotheses, gathering evidence, and testing benign explanations.

Sep 16

TrustSink: How a Rogue External MFA Provider Steals Passwords

Varonis Threat Labs identified a credential-phishing technique we call TrustSink. It turns a trusted external authentication provider into a persistent credential trap within a legitimate sign-in flow.

Sep 15

Introducing Varonis Data Lifecycle Management

Varonis Data Lifecycle Management (DLM) is a new capability that automatically finds and quarantines redundant, obsolete, and trivial (ROT) data across your entire data estate.

Sep 1

Varonis Achieves Snowflake Premier Partner Tier and Is Now Available on Snowflake Marketplace

We're excited to share two milestones in our growing relationship with Snowflake. Varonis has achieved Premier Partner status in the Snowflake Partner Network and is now available on the Snowflake Marketplace.

Aug 31

SIEM Is Not Enough: Why You Need DAM for Your Databases

Database security has followed the same playbook for years. Pick your ten or twenty most critical databases, deploy Imperva or Guardium on them, and take the eighteen-month, seven-figure hit.

Aug 21

3 Takeaways from Forrester’s 2026 Data Security Platforms Landscape Report

Forrester published a new report, The Data Security Platforms Landscape, Q3 2026, this week. It profiles 31 vendors and confirms what buyers already feel in their bones: As AI reshapes how data is accessed, created, and moved, the DSP has...

Aug 18

CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower

Varonis Threat Labs uncovered another one-click vulnerability in Microsoft Copilot Personal dubbed CoSnitch (critical, CVE-2026-24301 ), which quietly executes an attack chain that exfiltrates data from enterprises without obvious red...