The Curious Engineer

All blogs / Security

Varonis Blog

varonis.com/blog

Insights and analysis on cybersecurity from the leaders in data security.

Security

’20’21’22’23’24’25’26
Posts
721 from 23 Jul 2020 to 26 Oct 2026
Posting
weekly (103 in the last year)
Kind
company blog
Feed
https://www.varonis.com/blog/rss.xml

2026 92

  1. Varonis' Takeaways from Forrester’s 2026 Email, Messaging, and Collaboration Security Solutions Landscape Report
  2. Go With the Flow: Taking a Shadow Dependency in GCP Dataflow Cross Tenant
  3. PHP2Shell: One Upload, Full Server
  4. StealC Is Back, and This Time It's a RAT
  5. Varonis and Collibra: Improving Data Governance for Trusted AI
  6. Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQL
  7. Varonis is joining Proofpoint
  8. IBM’s Cost of a Data Breach Report 2026: AI Is Now the Attacker and the Target
  9. Least Privilege for AI Agents: A Practical Guide for Security Leaders
  10. Access Governance: Reducing Attacker Reach in the Age of AI-Accelerated Threats
  11. Varonis and Cohesity: Improving Cyber Resilience with Data Security
  12. AI Security Sep 25, 2026 AI Security Fundamentals: The Real Industry Shift Taking Place Experts discuss how AI is reshaping cybersecurity, from exposing existing vulnerabilities to enabling proactive defense strategies. Jonathan Villa 3 min read
  13. Threat Research Sep 23, 2026 Meet AvisLoader: A Windows Loader Built to Outlast a Takedown Varonis Threat Labs discovered AvisLoader, a new Windows malware loader built to keep its command-and-control (C2) channel beyond the reach of traditional domain takedowns. Daniel Kelley 5 min read
  14. Introducing Varonis Triage Agent: An Autonomous Incident Responder to Amplify MDDR Service
  15. AI Security Varonis Products Sep 21, 2026 Varonis Named a Pace Setter in the September 2026 Gartner® Emerging Market Quadrant for AI Application Security Discover how Varonis Atlas leads AI application security with innovative solutions that protect sensitive data throughout the AI lifecycle. Learn
  16. Sep 18, 2026 Teaching a Machine to Think Like an Incident Responder Take a look inside the Varonis Triage Agent — an AI incident investigator built to accelerate managed data detection and response (MDDR). Liav Alter 7 min read
  17. Threat Research Sep 16, 2026 TrustSink: How a Rogue External MFA Provider Steals Passwords Meet TrustSink, a technique that turns a rogue external MFA provider into a persistent credential trap. See how it works, why password resets may not remove the risk, and how defenders can detect rogue provide
  18. Sep 15, 2026 Introducing Varonis Data Lifecycle Management The data that puts you at risk of a breach also drives up your storage bill and degrades your AI. Remove it effortlessly with Varonis. Eugene Feldman 3 min read
  19. Data Security Varonis Products Sep 01, 2026 Varonis Achieves Snowflake Premier Partner Tier and Is Now Available on Snowflake Marketplace Varonis helps enterprises secure Snowflake environments so they can innovate fast with confidence. Nolan Necoechea 2 min read
  20. Data Security Aug 31, 2026 SIEM Is Not Enough: Why You Need DAM for Your Databases Learn about SIEM vs. DAM for database security. As AI agents query your databases, a pile of SIEM logs won't cut it. See what real DAM coverage can do. Eugene Feldman 5 min read
  21. Data Security Aug 21, 2026 3 Takeaways from Forrester’s 2026 Data Security Platforms Landscape Report Forrester's 2026 research into the landscape of data security platforms shows how agentic AI is expanding what DSPs are for. Rob Sobers 2 min read
  22. AI Security Threat Research Aug 18, 2026 CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower See how meta-hacking got Microsoft Copilot to snitch on itself, exposing CoSnitch, a one-click flaw that silently exfiltrates data. Lior Adar 10 min read
  23. Threat Research Aug 12, 2026 WS-Trust Autologon Endpoint: Password Spray Without Smart Lockout Blocking Learn how to mitigate risks tied to a legacy Entra ID endpoint that undermines Smart Lockout, allowing attackers to confirm valid passwords even on MFA-protected accounts. Hai Vaknin 6 min read
  24. AI Security Data Security Aug 07, 2026 Varonis Atlas Now Integrates with Claude Inference Hooks to Extend Real-Time AI Data Protection Varonis Atlas enforces data protection policy inline before a prompt ever reaches the model and extends coverage to Claude Chat and Claude Design. Nolan Necoechea 2
  25. AI Security Threat Research Aug 07, 2026 RovoBlast: How One Click Triggered Atlassian’s AI Assistant to Leak Data With access to Jira, Confluence, Microsoft 365, Google Workspace, Slack, and more, RovoBlast shows how a single link turns AI permissions into a low-friction path for data exposure. Dole
  26. AI Security Varonis Products Aug 03, 2026 Introducing Agent Intent-Based Access Control Discover how Varonis Atlas Agent IBAC helps enterprises bridge the gap between "agent deployed" and "agent trusted" Nolan Necoechea 4 min read
  27. Varonis Products Jul 31, 2026 Data Security Scanning Performance: Why Full Coverage Doesn't Mean Slow Scans Learn how Varonis keeps scans fast without cutting corners on coverage. Amanda Wicks 6 min read
  28. AI Security Threat Research Jul 29, 2026 When AI Assistant Share Links Become Public Exposure Explore the risks of AI assistant share links and their potential to expose sensitive data. Varonis Threat Labs 2 min read
  29. AI Security Jul 24, 2026 5 AI Security Challenges in 2026 and Why They Matter AI is a powerful business solution, but it must be deployed safely to minimize data risk. Amanda Wicks 2 min read
  30. AI Security Threat Research Jul 22, 2026 Dolphin X Stealer Targets 300+ Apps and Profiles Users with AI Dolphin X, a new Windows stealer and remote access trojan, targets hundreds of applications from browsers to crypto wallets and includes an AI Profiler that helps attackers zero in on victims. Dan
  31. AI Security Threat Research Jul 20, 2026 A Look Inside the Hugging Face Breach Explore the HuggingFace security breach involving an autonomous AI attacker and learn essential strategies to protect your org from similar threats. Varonis Threat Labs 6 min read
  32. Email Security Jul 20, 2026 Email Security Needs Proof, Not Static Detection: Takeaways from SACR's Email Security Report Static email defenses are falling short as attackers abuse identity, trust, and business workflows. Learn how the future of email security depends on context, investigation, and
  33. AI Security Jul 14, 2026 AI Agents Are Creating a New Class of Employee Risk AI agents pose a unique security risk because they act autonomously and execute actions on sensitive enterprise data. Ron Bennatan 2 min read
  34. AI Security Varonis Products Jul 14, 2026 Varonis Atlas Extends Coverage Across the Claude Enterprise Suite — From Claude Cowork to Claude Code Varonis Atlas extends coverage to Claude Cowork and Claude Code, giving security teams visibility and control across the entire Anthropic agentic portfolio.
  35. AI Security Varonis Products Jul 08, 2026 Varonis Atlas Secures Cursor and the Agentic Development Lifecycle Discover how Varonis Atlas secures Cursor and the AI development lifecycle, ensuring safe adoption while enhancing visibility and control over coding agents. Nolan Necoechea 4 min read
  36. AI Security Threat Research Jul 07, 2026 Rogue Agent: How a Single Code Block Could Hijack Your AI Conversations in Google’s DialogFlow AI chatbots widen the attack surface. We took over one to steal data and gain toeholds for launching campaigns. Daniel Reyhanian 6 min read
  37. Cloud Security Threat Research Jul 07, 2026 It's Not a Bug, It's a Feature: Kubernetes Access to GCP Org Admin A standard Kubernetes permission can become organization-wide Google Cloud admin access when Config Connector holds broad IAM roles. Building off Justin O'Leary's research, here's how the C
  38. DSPM Jul 02, 2026 Varonis Recognized as a Customers’ Choice for Data Security Posture Management for Third Consecutive Year Varonis is the only vendor to be named a Customers' Choice for three consecutive years running. Avia Navickas 2 min read
  39. Data Security Jun 26, 2026 Rethinking Database Security for the Age of AI and Cloud Discover the pillars of database security and how Varonis Next-Gen database activity monitoring (DAM) protects sensitive data in AI and cloud environments. Terry Ray 4 min read
  40. AI Security Threat Research Jun 25, 2026 Breach At The Beach: The Ultimate Entra ID Training Experience Discover how Varonis Threat Labs created Breach at the Beach, a unique Entra ID training experience. Enhance your cybersecurity skills through hands-on learning with this CTF. Lexi Croisdale 4 min
  41. Threat Research Jun 19, 2026 MyBait: Why We Lured Attackers To Encrypt Our Cloud MySQL Varonis Threat Labs deployed MySQL honeypots across GCP, AWS, and Azure. Only GCP was compromised. Here’s what it means for cloud database security. Gil Weizman 4 min read
  42. AI Security Threat Research Jun 15, 2026 SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon Varonis Threat Labs discovered SearchLeak, a critical vulnerability chain in Microsoft 365 Copilot Enterprise that allows an attacker to steal sensitive data — MFA codes, email m
  43. AI Security Jun 10, 2026 Zero Trust for AI Agents: How to Enforce Anthropic's Framework See how a Zero Trust framework for AI agents can enhance your organization's security posture and mitigate data risks effectively. Nolan Necoechea 4 min read
  44. AI Security Threat Research Jun 09, 2026 Phishing for Lobsters: How We Tricked OpenClaw into Spilling Secrets We built an AI agent and put it through four phishing simulations to reveal critical security gaps and offer solutions to protect your organization's data. Itay Yashar 6 min read
  45. AI Security May 28, 2026 Why AI Agents Are Making Database Activity Monitoring Critical Again Discover why integrating Database Activity Monitoring with AI security is essential for effective database protection in an era of autonomous agents. Manav Mital 4 min read
  46. AI Security May 26, 2026 What is AI Security Posture Management (AI-SPM)? Explore the importance of AI Security Posture Management (AI-SPM) in safeguarding AI systems, ensuring compliance, and mitigating risks effectively. Shawn Hays 6 min read
  47. Data Security Salesforce May 22, 2026 How Enverus Secures Salesforce Data and Prevents Data Breaches with Varonis Discover how Enverus partnered with Varonis to enhance Salesforce data security, improve threat detection, and prevent a major data breach. Nolan Necoechea 4 min read
  48. AI Security Varonis Products May 21, 2026 Varonis Announces Integration with the Claude Compliance API Varonis Atlas secures Claude Enterprise and Claude Platform by detecting misuse and threats in the context of sensitive data, permissions, and access risk. Nolan Necoechea 2 min read
  49. AI Security May 21, 2026 How Webster Bank Strengthens Customer Trust and Accelerates Secure AI Adoption with Varonis Discover how Webster Bank uses Varonis to ensure robust data security, securely adopt AI, and adhere to compliance in a complex landscape. Nolan Necoechea 3 min read
  50. Cloud Security May 20, 2026 Varonis Joins AWS Security Hub Extended to Power Unified, Data-Centric Security The integration helps security teams cut through alert noise, accelerate remediation, and protect sensitive data in AWS and across their entire data estate. Nolan Necoechea 2 min read
  51. Threat Research May 20, 2026 GitHub Breach via Malicious VS Code Extension: What You Need to Know GitHub's breach, caused by a malicious VS Code extension, exposed 3,800 internal repositories. Learn how to secure your environment. Chen Levy Ben Aroy 3 min read
  52. Threat Research May 19, 2026 GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security Varonis Threat Labs discovered a new technique that abuses NTFS junctions to generate infinite file paths, causing EDR products to hang and leave files unscanned. Dolev Taler 3 min read
  53. Varonis Products May 19, 2026 Varonis: The Platform Advantage for Security Explore how Varonis' unified approach enhances data, AI, and email security, reduces costs, and prevents breaches through automated solutions and comprehensive visibility. Eugene Feldman 10 min read
  54. Threat Research May 11, 2026 Feeding Frenzy: RCE on Azure Cosmos for PostgreSQL See how an Azure Cosmos for PostgreSQL vulnerability enabled remote code execution, its implications, and essential security best practices. Coby Abrams 4 min read
  55. Threat Research May 08, 2026 Canvas Attackers Compromise 275M Students, Teachers, and Staff The Canvas breach reveals how cybercriminals are targeting education: learn how the attack unfolded, what data was exposed, and the risks ahead. Joseph Avanzato 3 min read
  56. Email Security May 06, 2026 Abuse of Microsoft Dynamics Redirects Delivers Phishing Payloads at Scale Varonis Interceptor stopped a phishing campaign abusing Microsoft Dynamics redirects, highlighting how attackers are leveraging trusted SaaS infrastructure to evade email defenses. Meagan Huebner 3
  57. AI Security Threat Research May 06, 2026 Prompt Parkour: How I Tricked Claude into Building Ransomware See how Varonis' MDDR team bypassed Claude's safeguards, highlighting the risks of AI in cybercrime and underscoring the need for robust security practices. Jeff Gonzalez 5 min read
  58. AI Security Data Security May 05, 2026 AI Isn’t the Risk, Uncontrolled AI Is Discover what it takes to secure AI and why most approaches fall short. David Gibson 13 min read
  59. AI Security Threat Research Apr 29, 2026 Meet Bluekit: The AI-Powered All-in-One Phishing Kit Discover Bluekit, the AI-driven phishing kit that centralizes phishing operations with advanced features like automated domain registration and an AI Assistant. Daniel Kelley 3 min read
  60. Threat Research Apr 22, 2026 The "Success" Illusion: How Cross-Tenant ROPC Can Gaslight Your SOC and Poison Data Discover how attackers exploit cross-tenant ROPC to create misleading login events, undermining your security and data integrity without breaching your systems. Hai Vaknin 3 min read
  61. AI Security Apr 21, 2026 AI Security Platforms: Centralized Visibility, Enforcement and Monitoring for AI Systems Discover how AI Security Platforms help organizations securely scale AI with centralized visibility, runtime enforcement, and end‑to‑end monitoring. Meagan Huebner 4 min read
  62. AI Security Varonis Products Apr 20, 2026 Securing AI Application Development Uncover where sensitive data leaks in AI development and the practical steps to reduce risk and scale safely. Eugene Feldman 6 min read
  63. Threat Research Apr 20, 2026 The Vercel Breach: Steps To Protect Your Organization Vercel disclosed a major breach exposing customer environment secrets via a compromised AI tool. Learn what happened, why it matters, and the steps to protect your organization. Chen Levy Ben Aroy 3 min read
  64. Threat Research Apr 17, 2026 The Invisible Footprint: How Anonymous S3 Requests Evade AWS Logging Learn how anonymous S3 requests evaded AWS CloudTrail logging via VPC endpoints, the risks to enterprises, and how AWS addressed the issue. Maya Parizer 4 min read
  65. AI Security Data Security Apr 15, 2026 The Map is Not the Territory: The Impact of Anthropic Mythos on Data Security Claude Mythos is a meaningful moment. But the real danger isn't the explosion of CVEs. It's what attackers find when they exploit them. Brian Vecci 3 min read
  66. AI Security Apr 14, 2026 How Varonis Atlas Enables ISO/IEC 42001 Compliance Learn how Varonis Atlas helps operationalize ISO/IEC 42001 with AI inventory, risk management, continuous monitoring, and audit-ready evidence. Shawn Hays 5 min read
  67. AI Security Threat Research Apr 13, 2026 Deep Dive into Architectural Vulnerabilities in Agentic LLM Browsers Varonis Threat Labs investigated Comet, OpenAI Atlas, Edge Copilot, and Brave Leo to understand how LLM browsers work and where attackers can break them. Itay Yashar 14 min read
  68. Threat Research Apr 03, 2026 A Look Inside Claude's Leaked AI Coding Agent A Varonis Threat Labs breakdown of Anthropic’s Claude Code leak, uncovering the AI coding agent’s architecture, guardrails, and attack surface. Varonis Threat Labs 4 min read
  69. Threat Research Apr 01, 2026 A Quiet "Storm": Infostealer Hijacks Sessions, Decrypts Server-Side Meet Storm, a new infostealer that tiptoes around endpoint security tools, remotely decrypts browser credentials, and lets operators restore hijacked sessions. Daniel Kelley 3 min read
  70. Cloud Security Threat Research Mar 25, 2026 Varonis Discovers Local File Inclusion in AWS Remote MCP Server via CLI Shorthand Syntax Varonis uncovers a local file inclusion vulnerability in the AWS Remote MCP Server, exposing how authenticated access can lead to sensitive data exposure. Coby Abrams
  71. AI Security Mar 24, 2026 Applying Zero Trust to MCP in AI Systems Learn how MCP works, why its flexibility creates security risk, and the practical Zero Trust strategies needed to secure MCP servers and agent behavior. Shawn Hays 5 min read
  72. Data Security Varonis Products Mar 18, 2026 Varonis Recognized as a Leader in G2’s Spring 2026 Reports, Including New Data Security Posture Management Category Varonis has been recognized by G2 as a leader in data security, demonstrating its ability to help organizations secure data and control AI a
  73. AI Security Varonis Products Mar 17, 2026 Varonis Launches Atlas to Secure AI and the Data That Powers It Varonis Atlas is an AI Security Platform that gives organizations complete visibility and control over every AI system they build and run. Shawn Hays 5 min read
  74. Salesforce Threat Research Mar 10, 2026 What You Need To Know About Salesforce AuraInspector Attacks ShinyHunters is abusing misconfigured Salesforce Experience sites to expose sensitive data. Learn how the attack works and how to reduce your risk. Varonis Threat Labs 2 min read
  75. AI Security Mar 10, 2026 Your AI Assistant Is an Attacker's Favorite Recon Tool Attackers don't need scripts to enumerate your environment anymore. All they need is a compromised account and Copilot. Daniel Kelley 3 min read
  76. AI Security Mar 03, 2026 From Hype to Culture: How We Turned AI Adoption into Everyday Impact A practical, engineering‑led framework for turning gen AI investment into real adoption, measurable impact, and lasting culture. Yoav Lax 3 min read
  77. Mar 03, 2026 Copy, Paste, Ransom: Making Data Exfiltration As Easy as AzCopy Ransomware operators are ditching the usual tools for Microsoft’s own AzCopy, turning a trusted Azure utility into a data exfiltration powerhouse. Caleb Boyd 5 min read
  78. Cloud Security Threat Research Mar 02, 2026 From Code to Cloud: How Accidental Exposure Turns Into Attack Paths Learn how simple mistakes in coding can lead to severe data breaches and discover effective strategies to prevent accidental exposure in your organization. Guy Binyamin 4 min read
  79. Varonis Products Feb 27, 2026 Varonis as a Security Data AI Fabric Varonis unifies identity, data, email, and AI telemetry into a single security data fabric that correlates signals in real time to automate protection. Tyler Miller 9 min read
  80. Threat Research Feb 25, 2026 Shai-Hulud Campaigns Explained Months after Shai‑Hulud, organizations are still uncovering breaches. Learn what the campaign did, its lasting impact, and how to assess exposure. Simon Biggs 5 min read
  81. Threat Research Feb 24, 2026 1Campaign: A New Cloaking Platform Helping Attackers Abuse Google Ads 1Campaign is a new cloaking platform that helps attackers bypass Google Ads screening, evade security researchers, and keep phishing and crypto drainer pages online longer. Daniel Kelley 3 min read
  82. Data Security Threat Research Feb 19, 2026 How Cybercriminals Buy Access: Logins, Cookies, and Backdoors Explore how cybercriminals buy VPN credentials, infostealer logs, breach databases, and web shells to access networks without writing a single exploit. Daniel Kelley 4 min read
  83. Data Security Feb 17, 2026 Data Classification in the Age of LLMs: A Technical Deep Dive Discover how to combine LLM-based classification with deterministic methods to maximize accuracy, speed, and data sovereignty. David Gibson 7 min read
  84. Threat Research Feb 12, 2026 Dataflow Rider: How Attackers can Abuse Shadow Resources in Google Cloud Dataflow Discover how attackers can hijack Google Cloud Dataflow pipelines by manipulating shadow resources and learn how to secure your environment against it. Tamir Yehuda 6 min read
  85. AI Security Varonis Products Feb 03, 2026 Varonis to Acquire AllTrue.ai to Manage and Secure AI Across the Enterprise With the acquisition of AllTrue.ai, Varonis strengthens its ability to help organizations adopt safe, compliant, and trustworthy AI at scale. Yaki Faitelson 2 min read
  86. Data Security Jan 29, 2026 Data Discovery Is Not Data Security Cloud‑native data security demands go beyond basic discovery. Learn why DSPMs fall short and how continuous activity monitoring and remediation reduce real risk. Manav Mital 5 min read
  87. Microsoft 365 Threat Research Jan 27, 2026 Exfil Out&Look for Logs: Weaponizing Outlook Add-ins for Zero-Trace Email Exfiltration Varonis Threat Labs reveals how Outlook add-ins in Microsoft 365 can be exploited to exfiltrate sensitive email data without leaving forensic traces. Hadas Shalev 10 min
  88. Data Security Varonis Products Jan 23, 2026 Varonis SaaS: Fast & Easy Agentless Cloud Deployment Varonis’ cloud-native Data Security Platform deploys in minutes and delivers immediate protection at scale. Pranit Mallela 4 min read
  89. Threat Research Jan 23, 2026 Stanley — A $6,000 Russian Malware Toolkit with Chrome Web Store Guarantee A new malware toolkit called 'Stanley' spoofs websites while keeping the address bar intact and guarantees Chrome Web Store approval. Daniel Kelley 4 min read
  90. Varonis Products Jan 22, 2026 Varonis Concierge: Extending Data Security Beyond Software Varonis Concierge gives you expert, personalized guidance to secure sensitive data, optimize your platform, and achieve measurable security outcomes. Greg Gurevich 3 min read
  91. Threat Research Jan 14, 2026 Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data Varonis Threat Labs discovered a way to bypass Copilot’s safety controls, steal users’ darkest secrets, and evade detection. Dolev Taler 6 min read
  92. Data Security Email Security Ransomware Threat Research Jan 09, 2026 Cybercrime Predictions for 2026: What We’re Seeing from the Frontlines Discover how AI-powered cyber threats, malicious LLMs, and advanced phishing are reshaping security and demanding smarter, data-centric defenses in 2026. Lexi C

2025 70

  1. Threat Research Dec 28, 2026 MongoBleed (CVE-2025-14847): Risk, Detection & How Varonis Protects You MongoBleed (CVE‑2025‑14847) is a critical unauthenticated memory-leak vulnerability in MongoDB Server that allows attackers to remotely extract uninitialized heap memory—including sensitive info like
  2. Email Security Dec 16, 2025 Phishing Attacks: Types, Statistics, and Prevention Discover the latest phishing attack types, key statistics, and proven prevention strategies to protect organizations across email, messaging apps, and collaboration platforms. Jonathan Villa 6 min read
  3. Data Security Threat Research Dec 09, 2025 Spiderman Phishing Kit Mimics Top European Banks With A Few Clicks See how Spiderman, a new phishing kit targeting customers of European banks, works. The kit features real-time credential theft, OTP capture, and advanced filtering. Daniel Kelley 3 min read
  4. Threat Research Dec 08, 2025 When Passwords Win: A Deep Dive into ROPC-Enabled MFA Bypasses See how attackers use the ROPC OAuth flow to bypass MFA and turn stolen passwords into persistent access, and how you can detect and stop it. Ben Zion Lavi 5 min read
  5. Email Security Dec 01, 2025 Understanding Business Email Compromise (BEC): Threat Types and Defense Strategies Understand the types of Business Email Compromise (BEC), effective defense strategies, and solutions to protect your organization from email-based attacks. Jonathan Villa 6 min read
  6. Data Security Salesforce Nov 20, 2025 5 Must-Know Salesforce Security Tips Learn actionable strategies to safeguard your data – both within Salesforce and across your broader ecosystem. Jonathan Villa 2 min read
  7. Threat Research Nov 19, 2025 5 Ways Cybercrime Has Become a Subscription Business Cybercrime has adopted the subscription model, from cloud-based infostealer feeds to Telegram bots for OTP theft. Here are five ways cybercriminals are scaling their operations like a shadow SaaS industry. Daniel Kelle
  8. AI Security Data Security Nov 18, 2025 Varonis Announces New Microsoft Purview DSPM Integration The integration between Varonis and Purview helps organizations see and understand their critical data—wherever it lives. Shawn Hays 2 min read
  9. Varonis Products Nov 14, 2025 Introducing Varonis for Confluence Varonis now protects Atlassian Confluence, enabling organizations to secure their intellectual property and other sensitive data across pages, spaces, blogposts and attachments. Eugene Feldman 2 min read
  10. Nov 05, 2025 Why We’re Going All In on SaaS The future of data security is automated and effortless. Yaki Faitelson 2 min read
  11. AI Security Data Security Nov 01, 2025 Data Security Strategies for a Gen AI World: Expert Q&A on Protecting Enterprise Data Explore the key AI risks facing large organizations today and learn how to build safer, more resilient environments as adoption accelerates. Lexi Croisdale 9 min read
  12. Threat Research Oct 30, 2025 The Silent Attackers: Exploiting VPC Endpoints to Expose AWS Accounts of S3 Buckets Without a Trace Learn how a CloudTrail flaw revealed IDs via VPC endpoints and how to protect your cloud. Maya Parizer 5 min read
  13. Varonis Products Oct 30, 2025 What's New in Varonis: October 2025 Discover Varonis' latest features, including AI Identity Protection for Salesforce Agentforce and enhanced support for Google Workspace. Nolan Necoechea 1 min read
  14. Threat Research Oct 28, 2025 Meet Atroposia: The Stealthy Feature-Packed RAT Atroposia is a stealthy RAT with HRDP, credential theft, DNS hijacking & fileless exfiltration — aka cybercrime made easy for low-skill attackers. Daniel Kelley 5 min read
  15. Email Security Oct 24, 2025 Trusted Vendors, Twisted Links: The Dark Side of URL Rewriting Discover how attackers use advanced URL rewriting tricks to bypass traditional blocklists and how organizations can stay ahead of evolving threats. Stephen Kowski 3 min read
  16. Privacy & Compliance Oct 23, 2025 What India’s Digital Personal Data Protection Act Means for Security Learn how India’s Digital Personal Data Protection (DPDP) Act is shifting global data privacy and gain insights on reducing risk and ensuring compliance. Lexi Croisdale 2 min read
  17. Federal Oct 22, 2025 Why Compliance Does Not Equate to Security: A Data-Centric Perspective Regulatory compliance alone isn’t enough to ensure true data security. Explore the critical gaps between compliance and proactive protection. AJ Forysiak 3 min read
  18. Cloud Security Threat Research Oct 21, 2025 Azure App-Mirage: Bypassing Application Impersonation Safeguard Varonis Threat Labs discovered a loophole allowing attackers to impersonate Microsoft applications by creating malicious apps with deceptive names. Tomer Basin 5 min read
  19. AI Security Email Security Oct 21, 2025 AI-Powered Phishing Is Outpacing Traditional Defenses — Here’s How to Keep Up AI-powered phishing is outsmarting email security. Discover a multilayered defense from Gartner and how Varonis Interceptor protects your inbox. Lexi Croisdale 4 min read
  20. Email Security Oct 16, 2025 Inbox Infiltration: The File Type You’re Overlooking Discover how attackers use SVG files to hide malicious JavaScript in images, and learn how to defend against these evolving phishing threats. Stephen Kowski 3 min read
  21. AI Security Identity Salesforce Varonis Products Oct 14, 2025 Salesforce Agentforce Identity Security Vulnerabilities and Fixes Tips for reducing Salesforce Agentforce security risks through least privilege, safe agent behavior, and safeguards against prompt-injection data exposure. Eugene Feldman 5
  22. Data Security Oct 13, 2025 What is Database Activity Monitoring? DAM Explained A critical component of any organization's security strategy, Database Activity Monitoring tools are used by organizations to fulfill compliance criteria and protect sensitive data. Daniel Miller 6 min read
  23. Threat Research Oct 09, 2025 From CPU Spikes to Defense: How Varonis Prevented a Ransomware Disaster Discover how Varonis' advanced threat response ensured zero downtime and complete remediation when stopping a ransomware attack. Joseph Avanzato 5 min read
  24. AI Security Email Security Varonis Products Oct 08, 2025 How Interceptor Protects Your Inbox Using AI-Powered Email Security Social engineering threats are getting stronger. See how Interceptor's multi-modal AI strengthens defenses against phishing, BEC, and zero-hour attacks. Shawn Hays 5 min read
  25. Ransomware Threat Research Oct 01, 2025 ForcedLeak and the Future of AI Agent Security ForcedLeak exposes Salesforce Agentforce to silent CRM data theft via prompt injection, agent overreach, and CSP misconfig. Mitigate now. Daniel Miller 3 min read
  26. Data Security Privacy & Compliance Oct 01, 2025 Top 10 Cybersecurity Awareness Tips: How to Stay Safe and Proactive With breaches on the rise, it’s crucial to make cybersecurity a priority. Follow these preventative cybersecurity tips for stronger security practices. Lexi Croisdale 5 min read
  27. DSPM Varonis Products Sep 30, 2025 Securing Sensitive Data in Databricks Secure sensitive data in Databricks with deep visibility, proactive remediation, and active threat detection using Varonis. Collaborative Article 2 min read
  28. Threat Research Sep 30, 2025 MatrixPDF Puts Gmail Users at Risk with Malicious PDF Attachments Discover how PDF-based malware attacks work and how AI-powered email security can detect and block threats before they reach your inbox. Daniel Kelley 5 min read
  29. Email Security Threat Research Sep 29, 2025 The Fake Bureau of Investigation: How Cybercriminals Are Impersonating Government Pages The FBI is noticing a large uptick in fraudulent websites impersonating the IC3. Learn how users are unsuspectingly reporting cybercrime to cybercriminals. Shawn Hays 4
  30. Varonis Products Sep 26, 2025 What's New in Varonis: September 2025 Discover Varonis' latest features, including AI-native email security, new data protection policies, and new threat detection policies for Azure and Exchange Online. Nolan Necoechea 2 min read
  31. AI Security Sep 26, 2025 CyberTech Tokyo 2025: Security in the Age of Generative AI Discover the key insights from CyberTech Tokyo 2025, the growing risk of generative AI, and steps organizations can take to strengthen their data security. Lexi Croisdale 4 min read
  32. Varonis Products Sep 25, 2025 Accurate Classification that Scales: The Right Tool for the Right Job Accurate, scalable data classification is key to security, compliance, and safe AI. Learn how to avoid common pitfalls and choose the right approach. Ed Lin 6 min read
  33. Cloud Security Threat Research Sep 25, 2025 Where Are my Keys?! Ransomware Group Steals AWS Keys to Advance Ransomware groups now target AWS control planes using stolen keys and Pacu. Learn how Varonis detects, investigates, and stops these cloud threats. Simon Biggs 5 min read
  34. Data Security Healthcare Sep 24, 2025 Research Reveals Healthcare Orgs Have 90% of Sensitive Data Exposed to AI Varonis studied 98 IT environments to assess AI’s impact on healthcare, biotech, and pharma — and how organizations can better protect critical data. Lexi Croisdale 1 min read
  35. AI Security Data Security Sep 19, 2025 AI Security Starts with Data Security Learn how to protect AI pipelines by controlling data access, monitoring AI behavior, and preventing data exposure. Jonathan Villa 6 min read
  36. Threat Research Sep 17, 2025 BIDI Swap: Unmasking the Art of URL Misleading with Bidirectional Text Tricks Varonis reveals a decade-old Unicode flaw that enables BiDi URL spoofing and poses phishing risks. Learn how attackers exploit RTL/LTR scripts and browser gaps. Dolev Taler 3 min read
  37. Cloud Security Salesforce Sep 12, 2025 OAuth Connected Application Control : Lock Down Your Salesforce Environment Before Attackers Log In Lock down your Salesforce environment and stop OAuth-based threats with the CRM's new API Access Control. Varonis Threat Labs explains how it works and why it's
  38. Federal Sep 11, 2025 CMMC Final Rule Arrives — What It Means and How Varonis Can Help The DoD announced the final rule for the Cybersecurity Maturity Model Certification (CMMC), making compliance a gatekeeper for doing business with the DoD — here's what you need to know. Trevor Douglas 2 min read
  39. AI Security Threat Research Sep 10, 2025 AI-Generated Phishing: How One Email Triggered a Global NPM Supply Chain Crisis A massive phishing-led NPM attack compromised popular packages with 2.67B weekly downloads, hijacking crypto wallets via stealthy AI-generated emails. Varonis Threat Labs 5 min re
  40. DSPM Federal Sep 09, 2025 Strengthening Data Security Posture Management (DSPM) for Tribal Nations Tribal Nations are highly targeted subjects of cyberattacks. This will serve as a guide to what DSPM is, why it is so important, and how Varonis can help. Jacob Doster 5 min read
  41. AI Security Threat Research Sep 08, 2025 SpamGPT: The AI Tool Elevating Email Security Threats for Enterprises SpamGPT is a new AI-powered email attack tool that is changing the way businesses address email security issues. Learn how this technology makes phishing attacks more effective and how to p
  42. AI Security Sep 06, 2025 Detecting Agentic AI Threats with Agentic AI Detect and stop agentic AI threats with agentic AI: autonomous agents that monitor, investigate, and respond faster than traditional security tools. Jonathan Villa 6 min read
  43. Threat Research Sep 04, 2025 Cyber Resilience Assessment: Identifying Detection Gaps and Strengthening Security Validate your security tools with a real-world attack simulation that reveals detection gaps and boosts your cyber resilience. Seth Priestner 2 min read
  44. Cloud Security Salesforce Sep 03, 2025 When Integrations Become Infiltrations: What the Salesloft Drift Breach Reveals About SaaS Risk Learn how attackers exploited SaaS integrations in the Drift breach — and how to protect your Salesforce organization today. Daniel Miller 5 min read
  45. Data Security Varonis Products Sep 02, 2025 Varonis Acquires SlashNext, AI-Native Email Security Strategic acquisition adds the world’s best phishing and social engineering detection to the leading Data Security Platform. Yaki Faitelson 2 min read
  46. Threat Research Aug 29, 2025 Hidden in Plain Sight: A Misconfigured Upload Path That Invited Trouble A misconfigured upload path exposed a Linux web server to attack. Varonis Threat Labs reveals how it happened and how to prevent future breaches. Siddharth Jain 5 min read
  47. Data Security Salesforce Aug 27, 2025 Anatomy of a Salesforce Data Breach: Stopping User Impersonation How a bad actor systematically impersonates users to exfiltrate millions of Salesforce records. Nolan Necoechea 3 min read
  48. Cloud Security Aug 20, 2025 The Cloud Threat Playbook: Catching What Posture Tools Miss Identity is the new perimeter. Learn how Varonis stops cloud breaches by resolving access, detecting threats, and automating least privilege. Daniel Miller 4 min read
  49. Data Security Federal Aug 18, 2025 Why Data-Centric Security is Important for the DoD Learn how Varonis protects DoD environments by utilizing various approaches to secure sensitive data. Patrick Long 3 min read
  50. AI Security Threat Research Aug 14, 2025 Understanding and Defending Against the Model Context Protocol DNS Rebind Attack As organizations increasingly rely on MCP servers to bridge AI capabilities with business systems, understanding and defending against threats is critical. Varonis Threat Labs 6
  51. AI Security Healthcare Aug 13, 2025 From Rome to Radiology: Italy’s Response to AI Risks in Healthcare Italy is addressing AI risks in healthcare, recently giving clear data protection decrees from the Garante per la protezione dei dati personali. Shawn Hays 4 min read
  52. AI Security Aug 12, 2025 AI Deepfakes and Voice Clones Put Identity Security First AI deepfakes and voice clones are powering identity attacks like OTP fraud, KYC bypasses, CEO impersonation, and fake hiring schemes. Daniel Kelley 5 min read
  53. Cloud Security Threat Research Aug 11, 2025 Rusty Pearl: Remote Code Execution in Postgres Instances Varonis uncovers an RCE vulnerability in PostgreSQL via PL/Perl and PL/Rust. Learn how AWS RDS responded and how to secure your Postgres environment. Tal Peleg 6 min read
  54. Data Security Microsoft 365 Threat Research Aug 05, 2025 Varonis Incident Response: Stopping Microsoft 365 Direct Send Abuse Learn how Varonis Threat Labs uncovered a critical Microsoft 365 Direct Send exploit, and how organizations leveraged Varonis Incident Response to protect themselves from atta
  55. Varonis Products Jul 31, 2025 What’s New in Varonis: July 2025 Discover Varonis' latest features, including database activity monitoring, CSPM enhancements, Salesforce access graph, and more. Nathan Coppinger 3 min read
  56. AI Security Jul 28, 2025 ChatGPT DLP: What Enterprises Need to Know Learn how to prevent data leaks from ChatGPT with AI-specific DLP strategies covering risk, policy, controls, and compliance for secure enterprise AI use. Jonathan Villa 7 min read
  57. Varonis Products Jul 28, 2025 Overview of Next-Gen Database Activity Monitoring Reinventing Database Security: A simple, agentless solution to database security and compliance built for the AI era. Eugene Feldman 3 min read
  58. Cloud Security Salesforce Threat Research Jul 25, 2025 What Salesforce Organizations Need to Know About ShinyHunters and Vishing Learn about the vishing and recent attacks from ShinyHunters' targeting Salesforce environments and how your org can stay protected from data breaches and extortion. Varon
  59. AI Security Jul 24, 2025 Why Least Privilege Is Critical for AI Security Understand what the principle of least privilege (PoLP) is, how avoiding it creates risk for organizations, and how embracing it helps you stay secure in the face of AI innovation. Nolan Necoechea 4 min read
  60. Cloud Security Varonis Products Jul 22, 2025 Varonis Enhances CSPM Capabilities to Protect Cloud Data Varonis enhances its CSPM capabilities to provide centralized risk visibility, expanded misconfiguration detection, and unified workflows. Nathan Coppinger 2 min read
  61. Microsoft 365 Threat Research Jul 21, 2025 ToolShell: A SharePoint RCE chain actively exploited ToolShell is a critical SharePoint RCE exploit chain. Learn how it works, who’s at risk, and how to protect your environment before it’s too late. Varonis Threat Labs 4 min read
  62. AI Security Data Security Jul 17, 2025 Creating Custom GPTs and Agents That Balance Security and Productivity Custom GPTs and AI agents compound productivity, but with that comes added risk. Learn about ChatGPT's custom GPTs and how to build them with data security in mind. Jonathan Villa 4 min read
  63. Cloud Security Threat Research Jul 17, 2025 Copy-Paste Pitfalls: Revealing the AppLocker Bypass Risks in The Suggested Block-list Policy A subtle versioning error in Microsoft’s AppLocker block list exposes a bypass risk — learn how to spot and fix this overlooked security gap. Dolev Taler 2 min rea
  64. AI Security Email Security Jul 17, 2025 How Threat Actors Use AI to Hide Malicious Sites Discover how cybercriminals use cloaking to hide malicious sites from bots and scanners while deceiving users. Plus, learn how to uncover these hidden threats. Daniel Kelley 6 min read
  65. Microsoft 365 Ransomware Threat Research Jul 16, 2025 Take it Easy: How Attackers use AI and No-Code Tools with M365 for "Native Phishing" A real-world look at how attackers use OneNote, OneDrive, and AI/no-code tools like Flazio for phishing, and practical steps to defend your organization today. T
  66. Cloud Security Threat Research Jul 16, 2025 Behind the Making of Operation Frostbyte: The First Snowflake GOAT Complete Operation Frostbyte, an interactive mission created by Varonis Threat Labs to test the cybersecurity community’s Snowflake data security knowledge. Lexi Croisdale 4 min read
  67. Cloud Security DSPM Identity Microsoft 365 Jul 14, 2025 Multi-Cloud Identity: What to Consider Learn about enhancing multi-cloud security with authentication, access intelligence, automated remediation, unified monitoring, and compliance best practices. Daniel Miller 5 min read
  68. Data Security Federal Jul 14, 2025 From Snowden to Signalgate: What We Still Haven’t Fixed in Cybersecurity Explore major data breaches, their common thread, and practical solutions for data-centric security. Daniela Lulli 3 min read
  69. Data Security Jul 10, 2025 Varonis Incident Response: Preventing PII Exposure in Box Learn how the Varonis Incident Response team prevented PII from being compromised, and what this means for data in cloud collaboration platforms like Box. Brian Walsh 2 min read
  70. AI Security Data Security Jul 09, 2025 Security Risks in ChatGPT Enterprise Connectors: How to Prepare ChatGPT Enterprise is changing in the way it retrieves data and surfaces information to users in prompt responses. Learn about the new connectors and risks. Shawn Hays 9 min read

2024 1

  1. Threat Research Apr 12, 2024 Palo Alto Networks PAN-OS Zero-Day Active Exploit: What You Need to Know Palo Alto Networks issued a warning on April 12, 2024, that a critical, unpatched vulnerability in their PAN-OS firewall is being actively exploited. Varonis Threat Labs 2 min read

2021 1

  1. Data Security Threat Research Oct 07, 2021 Lessons from the Twitch Data Leak What happened? Increasingly covered by the mainstream press throughout Wednesday, October 6, 2021, the impact of the recent Twitch leak will undoubtedly grow as bad actors take advantage of the... Dvir Sason 5 min read

2020 1

  1. Data Security Jul 29, 2020 Varonis Recognized as a 2020 Gartner Peer Insights Customers’ Choice for File Analysis Software Varonis was rated 4.6 out of 5 stars in Gartner Peer Insights File Analysis Software, based on 211 reviews as of 23 July 2020. Download the full report. Avia Navickas 2 min read

Undated 556

  1. Cloud Security Threat Research Jul 09, 2025 Count(er) Strike – Data Inference Vulnerability in ServiceNow Varonis Threat Labs discovered a high severity vulnerability in ServiceNow’s platform that can lead to significant data exposure and exfiltration. Neta Armon 10 min read
  2. AI Security Data Security Jul 01, 2025 Varonis Announces Strategic Partnership with Microsoft to Help Secure the Future of AI Companies join forces to deliver scalable data security, governance, and compliance for the AI era Yaki Faitelson 1 min read
  3. AI Security Data Security Jun 30, 2025 Hidden Risks of Shadow AI Shadow AI is on the rise as employees adopt unsanctioned AI tools. Learn the risks it poses to security and compliance, and how to manage it responsibly. Jonathan Villa 5 min read
  4. Cloud Security Jun 30, 2025 Cloud Data Security: Best Practices Unlock the power of cloud data security: discover tips on access, monitoring, compliance, and more to keep your organization safe and thriving. Daniel Miller 5 min read
  5. AI Security Data Security Jun 26, 2025 A Guide to AI Data Security: Why it Matters and How to Get it Right Learn what AI data security really means, why it matters and how to protect sensitive data used by or exposed to AI systems and workflows. Lexi Croisdale 8 min read
  6. Varonis Products Jun 26, 2025 What's New in Varonis: June 2025 Discover Varonis' latest features, including ChatGPT Enterprise monitoring, a Varonis MCP Server, MPIP labeling in Box, and more. Nathan Coppinger 2 min read
  7. Threat Research Jun 26, 2025 Ongoing Campaign Abuses Microsoft 365’s Direct Send to Deliver Phishing Emails Varonis Threat Labs uncovered a phishing campaign with M365's Direct Send feature that spoofs internal users without ever needing to compromise an account. Tom Barnea 5 min read
  8. Cloud Security DSPM Jun 25, 2025 A DSPM-First Approach to Kubernetes Security Unlock true Kubernetes security with DSPM to discover, classify, and protect sensitive data where CSPM falls short. Daniel Miller 2 min read
  9. Cloud Security Threat Research Jun 19, 2025 Why Kerberoasting Still Matters for Security Teams Sometimes the old ones are best... avoided. Explore Kerberoasting and how it remains a relevant attack method. Simon Biggs 3 min read
  10. AI Security Data Security Jun 19, 2025 AI Model Poisoning: What You Need to Know Explore the growing threat of model poisoning, a cyberattack where machine learning models are manipulated, and how your organization can defend against it. Jonathan Villa 3 min read
  11. Threat Research Jun 18, 2025 The Jitter-Trap: How Randomness Betrays the Evasive Discover how Varonis researchers detect stealthy beacon traffic by analyzing jitter patterns, turning evasion tactics into powerful behavioral detection signals. Masha Garmiza 6 min read
  12. AI Security Data Security Varonis Products Jun 17, 2025 Introducing Varonis for ChatGPT Enterprise Varonis' industry-leading Data Security Platform supports OpenAI’s ChatGPT Enterprise, keeping data safe against risks of AI misuse and exposure. Shawn Hays 2 min read
  13. Cloud Security Jun 12, 2025 Multi Cloud Security: Challenges and How to Solve Them Uncover powerful strategies to protect multi cloud setups. Solve fragmented visibility, inconsistent policies, growing attack surfaces, and compliance woes. Daniel Miller 3 min read
  14. Varonis Products Jun 12, 2025 Streamline Entitlement Management with Varonis Streamline access requests, automate entitlement reviews, support just-in-time access, enforce least privilege, and reduce IT burden with Varonis. Nathan Coppinger 2 min read
  15. AI Security Jun 12, 2025 EchoLeak in Microsoft Copilot: What it Means for AI Security A critical vulnerability in Microsoft 365 Copilot exposes the risks of unsecured AI agents and why a data-centric approach is crucial for protection. Lexi Croisdale 3 min read
  16. Data Security Federal Jun 11, 2025 A User Always Finds a Way: The Federal Security Dilemma Our experts share how the road to data loss is usually paved with good intentions, and strategies for federal agencies to combat unintended mistakes. Trevor Douglas 3 min read
  17. AI Security Jun 09, 2025 Introducing the Varonis MCP Server The Varonis MCP Server simplifies how customers use AI tools and agents to execute complex workflows. Nolan Necoechea 2 min read
  18. Data Security Threat Research Jun 05, 2025 Decoding ‘ClickFix’: Lessons from the Latest Browser-Based Phish ClickFix tricks users into running malware via fake CAPTCHAs. Learn how this phishing tactic works — and how Varonis stops it cold. Daniel Kelley 5 min read
  19. Data Security Jun 04, 2025 When Ransomware Wreaks Havoc on Hospitals Dayton Children's Hospital CIO J.D. Whitlock shares insights on cybersecurity in healthcare, including managing ransomware threats. Megan Garza 1 min read
  20. Data Security Jun 04, 2025 Why Data Security Starts With What You Can’t See Discover the most overlooked gaps in data security strategies and how to close them with automation, visibility, and unified protection across platforms. Jonathan Villa 6 min read
  21. Identity Jun 03, 2025 Varonis Announces Identity Protection to Unite Identity and Data Security Varonis fuses Identity Protection into its leading Data Security Platform for accelerated breach prevention. Shawn Hays 3 min read
  22. Data Security Ransomware Jun 02, 2025 UEBA Emerges as Critical Defense in Coinbase MFA-Related Breach Learn how UEBA can help defend against identity-based attacks like the recent Coinbase breach. Daniel Miller 2 min read
  23. Threat Research May 30, 2025 Scattered Spider: What You Need to Know Get details on a prominent threat group and defensive recommendations to keep your organization's sensitive data secure. Joseph Avanzato 2 min read
  24. Threat Research May 30, 2025 Commvault Metallic 0-Day Breach: What Happened and What It Means The Commvault Metallic breach highlights the importance of securing identities, vetting vendors, and enforcing strict access controls in the cloud. Rob Sobers 2 min read
  25. Data Security May 29, 2025 3 Steps to Secure Your Snowflake Data Discover the data security risks in Snowflake and learn specific tactics to ensure safe practices. Eugene Feldman 6 min read
  26. Varonis Products May 29, 2025 What’s New in Varonis: May 2025 Discover Varonis' latest features, including Azure CIEM enhancements, expanded classification tagging support, and improved reporting. Nathan Coppinger 2 min read
  27. Threat Research May 27, 2025 Breaking and Re-Entering: Anatomy of a Resilient M365 BEC Attack Leveraging Inbound Connectors Varonis uncovered a BEC attack leveraging Microsoft 365 admin tools, revealing advanced attacker methodologies and exploitation of administrative privileges. Paul Wang 4 min re
  28. Data Security May 23, 2025 UEBA Buyer's Guide: How to Choose the Right Solution Understand the need for UEBA, the gaps it fills in the modern threat detection landscape, and the right ingredients for a strong solution. Jonathan Villa 4 min read
  29. Identity May 22, 2025 Varonis Named a Leader in GigaOm Radar for Identity Threat Detection and Response (ITDR) We are excited to announce that Varonis has been recognized as a leader in the 2025 GigaOm Radar for Identity Threat Detection and Response (ITDR). Shawn Hays 2 min read
  30. Data Security May 21, 2025 Gear Check: The Commanding Officer’s Guide to Data Security Discover why commanders should expect their leaders to inspect, monitor, and secure every file as rigorously as every rucksack. Jon Gordon 3 min read
  31. AI Security Data Security May 20, 2025 Data Security Report Reveals 99% of Orgs Have Sensitive Information Exposed to AI Varonis' 2025 State of Data Security Report shares findings from 1,000 real-world IT environments to uncover the dark side of the AI boom and what proactive steps orgs can take to
  32. Featured Federal May 19, 2025 Varonis Achieves FedRAMP® Moderate Authorization Varonis is proud to achieve FedRAMP Moderate Authorization, highlighting our commitment to data security for federal agencies. Trevor Brenn 3 min read
  33. Cloud Security May 13, 2025 Exploring Infrastructure as Code: A Technical Deep Dive See how Infrastructure as Code (IaC) enhances security, streamlines operations, and optimizes infrastructure management. Daniel Miller 2 min read
  34. Data Security May 07, 2025 DLP Solutions Need a Zero-Trust Renaissance Adoption of AI applications has transformed how data flows in and out of the organization. DLP needs a zero-trust renaissance in a post-AI world. Shawn Hays 6 min read
  35. AI Security Cloud Security Microsoft 365 May 07, 2025 Enhancing Proactive Security Across SaaS Applications Discover powerful strategies to secure SaaS apps, Microsoft 365, and AI tools like Copilot. Uncover how to safeguard your data and elevate cloud security. Daniel Miller 3 min read
  36. Cloud Security Threat Research May 06, 2025 Does AZNFS SUID your needs? A Path to Root Privilege Escalation on Azure AI and HPC Workloads Using an Azure Storage Utility Discover how a critical bug in AZNFS-mount could let attackers escalate privileges — and why updating to version 2.0.11 is vital fo
  37. Data Security May 05, 2025 The Superpower of GRC Corey Reed, the Senior Director of Information Security for HD Supply, discusses the importance of governance, risk, and compliance. Megan Garza 2 min read
  38. Threat Research May 02, 2025 One Small Click for an Admin, One Giant Breach for the Organization Cyber attackers are targeting IT admins using clever SEO tricks to disguise malicious payloads to push these threats to the top of search results. Varonis Threat Labs 5 min read
  39. AI Security May 02, 2025 AI Data Security: Hidden Risks AI doesn't just consume data — it reshapes how it's accessed, shared, and exposed. Understanding what data security risks AI brings to your org is paramount. Lexi Croisdale 7 min read
  40. AI Security Apr 29, 2025 Supercharging Threat Detection with Agentic AI Varonis announces the introduction of agentic AI to enhance the efforts of our world-class experts to provide customers with 24x7 data defense. Nolan Necoechea 2 min read
  41. Data Security Apr 28, 2025 Data Security is a Team Sport A shared responsibility for securing sensitive data amongst teams is crucial for organizational success. Matt Christensen 4 min read
  42. AI Security Apr 28, 2025 Introducing AI Security: Always-On AI Risk Defense AI Security is part of a growing set of AI-powered features in Varonis’ Data Security Platform that make data security effortless Nolan Necoechea 2 min read
  43. Cloud Security Apr 25, 2025 Unlocking the Secrets: Ransomware in AWS S3 with SSE-C Encryption Uncover the secrets of ransomware attacks on AWS S3 with SSE-C encryption. Learn how to safeguard your cloud data from emerging threats. Daniel Miller 4 min read
  44. Varonis Products Apr 24, 2025 What’s New in Varonis: April 2025 Discover Varonis' latest features, including Azure CIEM enhancements, expanded classification tagging support, and improved reporting. Nathan Coppinger 2 min read
  45. Microsoft 365 Threat Research Apr 24, 2025 SessionShark Steals Session Tokens to Slip Past Office 365 MFA Discover how phishing kits like SessionShark threaten MFA security and learn how Varonis AI-driven solutions proactively defend against advanced phishing attacks. Daniel Kelley 4 min read
  46. Threat Research Apr 22, 2025 Cookie-Bite: How Your Digital Crumbs Let Threat Actors Bypass MFA and Maintain Access to Cloud Environments Silent and undetectable initial access is the cornerstone of a cyberattack. MFA is there to stop unauthorized access, but attackers are constantly evolving. Oren B
  47. Data Security Varonis Products Apr 21, 2025 Varonis Partners with Pure Storage to Protect Critical Data Together, Varonis and Pure Storage enable customers to proactively secure sensitive data, detect threats, and comply with evolving data and AI privacy rules. Nolan Necoechea 2 min read
  48. Data Security Apr 16, 2025 Varonis and Concentrix: Delivering Data Security for the AI Revolution Varonis and Concentrix aim to help large enterprises implement and harness AI safely and effectively while protecting what matters most — data. Lexi Croisdale 1 min read
  49. Cloud Security Threat Research Apr 15, 2025 Burning Data with Malicious Firewall Rules in Azure SQL Server Exploiting a security gap in firewall rule-naming can suddenly delete entire servers and targeted assets when combined with admin actions. Coby Abrams 4 min read
  50. Cloud Security Threat Research Apr 15, 2025 Avoid Getting Burned: Identifying and Correcting Common Misconfigurations in Azure Networking and Firewalls Misconstruing the nuances of Azure Networking and Firewalls can result in security gaps and data exposure. Coby Abrams 4 min read
  51. Cloud Security Ransomware Threat Research Apr 10, 2025 RansomHub – What You Need to Know About the Rapidly Emerging Threat RansomHub, the notorious ransomware group, has affected over 200 victims in industries such as IT, healthcare, finance, and more. Joseph Avanzato 4 min read
  52. Cloud Security Data Security Apr 08, 2025 Data Discovery and Classification: The Importance of How Data is Scanned Data discovery and classification are the foundations for DSPM and data security, but how your data is scanned is more important than you may think. Nolan Necoechea 3 min read
  53. AI Security Threat Research Apr 07, 2025 Xanthorox AI — The Next Generation of Malicious AI Threats Emerges Xanthorox AI is a modular, self-hosted Black-Hat AI tool for cybercrime. Varonis counters it with real-time detection of AI-driven email threats. Daniel Kelley 3 min read
  54. Cloud Security Data Security Identity Apr 04, 2025 Introducing the Azure Access Graph to Find and Fix Cloud Security Issues Full spectrum visibility into Azure data access, entitlements, and identities beyond CIEM and data discovery tools Shawn Hays 2 min read
  55. Data Security Apr 02, 2025 From Table Stakes to a Team Sport: Rethinking Cybersecurity Hal Wing, Centuri's Cybersecurity Manager, debunks cybersecurity's nickname and shares the importance of embracing emerging technologies. Megan Garza 2 min read
  56. Data Security Healthcare Apr 02, 2025 Data Breaches in Healthcare: Why Identity Protection and Data Security are More Important Than Ever Our latest report shows a significant rise in healthcare data breaches, posing severe risks to patient privacy and organizational integrity. Daniel Miller 1 min r
  57. Varonis Products Mar 27, 2025 What’s New in Varonis: March 2025 Discover Varonis' latest features, including new data governance, labeling, and AI security capabilities. Nathan Coppinger 2 min read
  58. Cloud Security Mar 26, 2025 Navigating the Cloud: Kubernetes Trends in 2025 As 2025 unfolds, the world of cloud security and Kubernetes is rapidly transforming, presenting exciting new challenges and opportunities for growth. Daniel Miller 3 min read
  59. DSPM Data Security Microsoft 365 Mar 25, 2025 The Folder Fallacy: Unmasking Hidden Permissions in Microsoft 365 With the passing of time, admins and users lose sight of inherited sharing from SharePoint sites and folders, and this lack of visibility creates data risk. This article discusses one such
  60. Cloud Security Mar 20, 2025 Why Cloud Security Programs Fail Unlock the secrets to robust cloud security. Learn how to tackle common challenges and protect your organization from data breaches and cyber threats. Daniel Miller 4 min read
  61. Cloud Security Data Security Mar 19, 2025 Rippling Believe it or Not: How the Largest Corporate Espionage Case this Century Happened Rippling, a leader in workforce management software, filed a lawsuit against its competitor, Deel, accusing it of planting a spy and exfiltrating customer and competit
  62. Varonis Products Mar 19, 2025 Streamline Data Governance with Data Lifecycle Automation Seamlessly copy and move data—cross-domain or cross-platform—without the risk of breaking permissions or interrupting business. Nathan Coppinger 5 min read
  63. Cloud Security Varonis Products Mar 17, 2025 Varonis Acquires Cyral to Reinvent Database Activity Monitoring Strategic DAM acquisition accelerates our mission to deliver AI-powered data security for all data, everywhere. Yaki Faitelson 2 min read
  64. AI Security Cloud Security Data Security Federal Mar 12, 2025 Federal Data Security Challenges in the Age of AI Insights from Varonis' Craig Mueller's on the rise in AI and the need for data security in the public sector. Craig Mueller 3 min read
  65. Cloud Security Data Security Ransomware Threat Research Mar 12, 2025 Mind Games: How Social Engineering Tactics Have Evolved Instead of using advanced tools or complex scripts, skilled threat actors infiltrate systems and steal data using the most effective weapon of all — words. Varonis Threat Labs
  66. Threat Research Mar 05, 2025 Salt Typhoon: The Threat Group Behind Major Cyberattacks Varonis Threat Labs profiles Salt Typhoon, an APT group that is responsible for a series of breaches targeting U.S. infrastructure and government agencies. Joseph Avanzato 5 min read
  67. Data Security Healthcare Mar 05, 2025 Data Governance in Healthcare With massive amounts of healthcare data and life-or-death scenarios depending on accurate information, a solid data governance policy is critical. Daniel Miller 4 min read
  68. Data Security Salesforce Varonis Products Mar 05, 2025 Varonis Delivers Market-leading Salesforce Security Including Agentforce Coverage Varonis eliminates risks, finds and remediates exposure, and detects anomalous behavior with the most complete Salesforce security product on the planet. Eugene Fe
  69. Data Security Mar 04, 2025 Varonis Named a Leader and Customer Favorite in The Forrester Wave™: Data Security Platforms, Q1 2025 Varonis is recognized in The Forrester Wave™ for its strongest Current Offering and Strategy, receiving more 5/5 scores than any vendor evaluated. Avia Navickas 2 min read
  70. AI Security Data Security Mar 03, 2025 AI Security: Frequently Asked Questions for 2025 AI-related questions and answers for business leaders. If you're trying to build more productive and secure AI strategies, these are the FAQS for you. Shawn Hays 12 min read
  71. Cloud Security Feb 28, 2025 Overcoming Cloud Security Challenges: Key Risks and Threats Moving to the cloud brings several benefits, but it also means dealing with new security issues. Daniel Miller 5 min read
  72. Varonis Products Feb 27, 2025 What’s New in Varonis: February 2025 Discover Varonis' latest features, including automated Google Workspace labeling, Azure Blob exposure remediation, Entra ID group remediation, and more. Nathan Coppinger 2 min read
  73. Data Security Feb 26, 2025 Varonis Opens Data Centers in India to Support Expanding Customer Base and Minimize Cloud Data Risk Varonis' newest international data centers in India help customers comply with local regulatory frameworks and data privacy sovereignty rules. Megan Garza 1 min read
  74. Cloud Security Feb 26, 2025 Understanding Cloud Governance: A Comprehensive Guide In the rapidly evolving digital landscape, cloud governance has emerged as a crucial framework for organizations using cloud technologies. Daniel Miller 3 min read
  75. Cloud Security Feb 24, 2025 What is Cloud Security? The risks associated with cloud environments are only growing. This blog highlights the basics of cloud security to secure data in the cloud. Daniel Miller 4 min read
  76. Threat Research Feb 13, 2025 Astaroth: A New 2FA Phishing Kit Targeting Gmail, Yahoo, AOL, O365, and Third-Party Logins Discover how Astaroth phishing kits bypass security, offer bulletproof hosting, and how Varonis protects businesses from advanced cyber threats. Daniel Kelley 2 min read
  77. AI Security Salesforce Feb 11, 2025 3 Steps to Get Ready for Agentforce Discover the risks of enabling Agentforce without proper data security and learn specific tactics to ensure a safe deployment. Eugene Feldman 4 min read
  78. AI Security Data Security Jan 31, 2025 DeepSeek Discovery: How to Find and Stop Shadow AI Understand the security implications of employees using DeepSeek, such as shadow AI, and how your organization can immediately mitigate risks. Rob Sobers 2 min read
  79. Varonis Products Jan 30, 2025 What’s New in Varonis: January 2025 Discover Varonis' latest features, including recommendations for right-sizing access in AWS, new M365 remediation policies, and enhanced search management. Nathan Coppinger 2 min read
  80. Threat Research Jan 29, 2025 Devil-Traff: A New Bulk SMS Platform Driving Phishing Campaigns Discover how the Devil-Traff bulk SMS platform fuels phishing attacks with spoofing and automation. Daniel Kelley 2 min read
  81. Cloud Security Ransomware Jan 28, 2025 Ransomware Targets AWS S3 Buckets: How to Prevent Encryption Without Recovery A new ransomware threat is targeting users of AWS S3 Buckets, which could be a lose-lose scenario for unprotected organizations. Daniel Miller 2 min read
  82. Data Security Healthcare Privacy & Compliance Jan 27, 2025 Decoding Proposed Changes to the HIPAA Security Rule Learn about recommended changes to the HIPAA Security Rule in the latest Notice of Proposed Rulemaking (NPRM) and discover how health organizations will be impacted. Shawn Hays 5 min read
  83. Data Security Jan 22, 2025 Shifting the Paradigm: Why Data Security is Finally Taking Center Stage Craig Mueller, VP of Federal at Varonis, compares how cybersecurity trends have evolved over time and why data should remain at the top of the list. Craig Mueller 3 min read
  84. Data Security Jan 22, 2025 Speed Data: Navigating Insurance Technology With Ralph Severini The AWS leader discusses generative AI's future and his role in stopping the first cybercriminal. Megan Garza 2 min read
  85. Cloud Security Data Security Jan 21, 2025 Varonis Once Again Named a Leader in GigaOm Radar for Data Security Platforms GigaOm, a leading analyst firm, recognizes Varonis for behavioral analytics, access security, service integration, & continued innovation in AI & automation. Nolan Necoechea 2 min
  86. Cloud Security Jan 15, 2025 Change These 7 Security Settings After Creating a New AWS Account Take these immediate actions to enhance your security posture significantly when creating a new AWS account. Lexi Croisdale 8 min read
  87. AI Security Email Security Jan 13, 2025 Inside a 90-Minute Attack: Breaking Ground with All-New AI Defeating Black Basta Tactics Learn how a lightning-fast phishing attack mimicking Black Basta tactics was quickly stopped by Varonis Interceptor. Stephen Kowski 4 min read
  88. Data Security Jan 09, 2025 Speed Data: Iron-Clad Security With Aaron Ansari Aaron Ansari, virtual CISO of Exela Pharma Sciences, shares his insights on proactive planning, organizational control, and what it takes to be an Ironman. Megan Garza 2 min read
  89. Threat Research Jan 06, 2025 Meet PhishWP — The New WordPress Plugin That’s Turning Legit Sites into Phishing Traps Discover how PhishWP, a malicious WordPress plugin, turns trusted sites into phishing traps and how to protect yourself with Varonis. Daniel Kelley 3 min read
  90. Cloud Security Jan 02, 2025 What is S3 Bucket Namesquatting, and How Do You Prevent It? This blog examines AWS S3 bucket namesquatting, methods to address the issue, and how Varonis can prevent this and other data security problems in AWS. Nolan Necoechea 3 min read
  91. Data Security Varonis Products Dec 20, 2024 How Varonis Improves Data Security with Automated Labeling Discover the power of Varonis' automated labeling and how it can be an important element in securing your sensitive data. Nolan Necoechea 4 min read
  92. Varonis Products Dec 19, 2024 What’s New in Varonis: December 2024 Discover Varonis' latest features, including support for Databricks and ServiceNow, automated threat responses, and more. Nathan Coppinger 1 min read
  93. Data Security Varonis Products Dec 18, 2024 What Is Data Masking? Learn what data masking is, why it matters, and how to automatically protect sensitive data in cloud databases using dynamic, policy-based masking techniques. Nathan Coppinger 6 min read
  94. Data Security Identity Dec 17, 2024 Why Identity is the Biggest Blind Spot in Data Security Modern Data Security Platforms (DSP) must integrate identity risk and context for effective posture management, threat detection, and response. Shawn Hays 3 min read
  95. Cloud Security Dec 16, 2024 Implementing AWS Resource Control Policies: Key Features and Benefits AWS' new Resource Control Policies (RCPs) aim to improve control over resource access. However, organizations should approach implementation with caution. Dubie Dubendorfer 2 min read
  96. Cloud Security Data Security Dec 16, 2024 AWS vs Azure vs Google: Cloud Services Comparison This AWS vs Azure vs Google comparison evaluates these public cloud providers including pricing, computing, storage and other features. Dubie Dubendorfer 6 min read
  97. Data Security Dec 13, 2024 Research Reveals 57% of Cyberattacks Start with Compromised Identity Our latest research report examines cyberattacks reported in 2024, deep-diving into how they occurred, the consequences, and how you can protect your org. Nolan Necoechea 2 min read
  98. Cloud Security Varonis Products Dec 12, 2024 Introducing Varonis for ServiceNow Varonis now supports ServiceNow, enabling ServiceNow customers to secure their sensitive data, prevent breaches, and comply with regulations. Nolan Necoechea 2 min read
  99. Data Security Dec 05, 2024 CISO Secrets: Building the Ultimate Security Plan for 2025 Learn why threats to the cybersecurity space might not be as advanced as they seem and gain strategic advice on developing your security plan. Megan Garza 3 min read
  100. Data Security Threat Research Nov 26, 2024 Caught in the Net: Unmasking Advanced Phishing Tactics Learn new, advanced phishing tactics being used by attackers and how your organization can combat them. Tom Barnea 4 min read
  101. Varonis Products Nov 21, 2024 What’s New in Varonis: November 2024 Discover Varonis' latest features, including Google Cloud support, Database masking, AWS access graph, and more. Nathan Coppinger 2 min read
  102. Cloud Security Varonis Products Nov 20, 2024 Introducing Varonis for Google Cloud Varonis’ support for Google Cloud brings a unified and automated data security approach to major cloud providers. Ellen Wilson 2 min read
  103. Varonis Products Nov 19, 2024 Varonis Integrates With MongoDB for Unmatched Data Visibility Discover and classify sensitive data stored in MongoDB with pinpoint accuracy to properly identify and secure critical information. Nathan Coppinger 2 min read
  104. Data Security Nov 19, 2024 38 Must-Know Healthcare Cybersecurity Stats Cybersecurity in the healthcare sector is crucial. Learn strategies to strengthen your security posture with these insights. Megan Garza 4 min read
  105. Threat Research Nov 14, 2024 Varonis Discovers New Vulnerability in PostgreSQL PL/Perl Varonis discovered a vulnerability (CVE-2024-10979) in the Postgres trusted language extension PL/Perl that allows setting arbitrary environment variables in PostgreSQL session processes. Varonis Threat Labs 2 min
  106. Cloud Security Varonis Products Nov 13, 2024 Varonis Extends Industry-Leading Cloud Data Security to Azure Databases Discover and protect critical data stored in Azure databases with Varonis' industry-leading cloud data security. Nathan Coppinger 2 min read
  107. Threat Research Nov 12, 2024 GoIssue — The Tool Behind Recent GitHub Phishing Attacks Discover how GoIssue targets GitHub users, posing significant risks to developers and organizations. Daniel Kelley 2 min read
  108. Active Directory Microsoft 365 Threat Research Nov 10, 2024 New Organizational Messages Feature in Microsoft 365 a Potential Risk The new organizational messages feature for Microsoft 365 enhances how IT and security teams communicate with users at scale, but also generates risks. Shawn Hays 3 min r
  109. Identity Varonis Products Nov 06, 2024 To Minimize AWS Exposure, Visualize The Risk Visualize and reduce AWS exposure by identifying risky access paths, removing stale permissions, and strengthening cloud security with clearer access insights. Nathan Coppinger 4 min read
  110. Varonis Products Oct 30, 2024 What's New in Varonis: October 2024 Discover Varonis' latest features, including new automated remediation policies, Box Zones support, autonomous database classification, and more. Nathan Coppinger 1 min read
  111. Data Security Oct 29, 2024 Speed Data: The Cyclical Nature of Data With Shesh Kondi The Salesforce pro discusses how security has evolved and the surprising characteristic unique to the cybersecurity field Megan Garza 2 min read
  112. AI Security Data Security Oct 22, 2024 Applying NIST CSF 2.0 to Microsoft 365 Copilot Discover how to apply the new NIST CSF 2.0 to Microsoft 365 Copilot and how Varonis can help. Shawn Hays 4 min read
  113. Email Security Oct 21, 2024 How Dark Web Anti-Bot Services Aid Phishing Campaigns Explore novel anti-bot services advertised on the dark web, how they bypass Google's Red Page, and the issues security teams have in defending against them. Daniel Kelley 4 min read
  114. AI Security Oct 17, 2024 How Tampa General Hospital Deployed Copilot Safely With Varonis Discover how Tampa General Hospital safely deployed Microsoft 365 Copilot to tackle administrative tasks with Varonis. Lexi Croisdale 2 min read
  115. Data Security Oct 14, 2024 Speed Data: Protecting Private Healthcare Data With Doug Cox The Salesforce leader emphasizes the importance of securing sensitive healthcare data Megan Garza 2 min read
  116. Data Security Oct 03, 2024 31 Must-Know Education Cybersecurity Statistics We’ve compiled the most important cybersecurity stats and trends regarding cybersecurity, so institutions can keep their sensitive data safe and secure. Tomer Ronen 4 min read
  117. Data Security Oct 02, 2024 Speed Data: The Dangers of Data Poisoning With Avi Yoshi The Microsoft CTO discusses emerging threats and the challenges of cloud migration. Megan Garza 2 min read
  118. Cloud Security Sep 30, 2024 Breaks in the Cloud: Protecting Against Top LLM Risks Understand the risk of Large Language Models (LLMs) to your cloud security and why it's important to be cautious when adopting new technologies. Megan Garza 3 min read
  119. Data Security Email Security Sep 30, 2024 The Hidden Risks of URL Rewriting and the Superior Alternative for Email Security URL rewriting is a common practice in email security. As threats evolve, it's clear that this approach has limitations and potential vulnerabilities. Stephen Kowski 3 min read
  120. Threat Research Sep 26, 2024 New CVEs in OpenPrinting CUPS Software A series of vulnerabilities in OpenPrinting CUPS Software indicates an attack vector for RCE, one of the worst possible consequences for a vulnerability. Varonis Threat Labs 3 min read
  121. Varonis Products Sep 25, 2024 What's New in Varonis: September 2024 Discover Varonis' latest features, including Salesforce high-risk permissions remediation, SIEM and ticketing integrations, and expanded database coverage. Nathan Coppinger 1 min read
  122. Data Security Sep 20, 2024 The Attacker’s Playbook: Security Tactics from the Front Lines Understand a threat actor's mindset to strengthen your security posture with mitigation tips from Varonis' forensic experts. Lexi Croisdale 2 min read
  123. Data Security Sep 19, 2024 Speed Data: The Basics of Cybersecurity With Mark Wigham The Salesforce leader shares insights on DLP, supporting security teams, and essential cybersecurity principles Megan Garza 2 min read
  124. Salesforce Varonis Products Sep 17, 2024 Varonis Enhances Salesforce Security With High-Risk Permissions Remediation Identify and automatically remediate high-risk Salesforce permissions to reduce risk and improve your SaaS security posture. Nathan Coppinger 1 min read
  125. Threat Research Sep 16, 2024 Data Theft in Salesforce: Manipulating Public Links Varonis Threat Labs uncovered a vulnerability in Salesforce's public link feature that threat actors could exploit to retrieve sensitive data. Nitay Bachrach 6 min read
  126. Data Security Sep 12, 2024 Speed Data: Military Information Security With Mike Taylor Mike Taylor, the Hospital Ship Joint Task Director at the U.S. Department of Defense, shares his responsibilities in securing the USNS Mercy and USNS Comfort and challenges the conventional views of military ships.
  127. AI Security Salesforce Sep 09, 2024 Speed Data: Unpacking Gen AI With Yohan Kim Yohan Kim, Distinguished Security Technical Architect for Salesforce, gives insight into AI functionality and customer sentiments on Varonis' Speed Data show. Megan Garza 3 min read
  128. DSPM Data Security Sep 06, 2024 Data Security in the Cloud: Key Use Cases for DSPM Discover the key use cases for data security posture management (DSPM) and why this framework is only one part of a holistic data security approach. Nolan Necoechea 3 min read
  129. Varonis Products Sep 05, 2024 Protecting Salesforce: Remediating Misconfigured Sites Varonis enables organizations to identify and remediate misconfigured Salesforce Site guest permissions that expose sensitive data publicly. Nathan Coppinger 1 min read
  130. Privacy & Compliance Aug 29, 2024 What The New SEC Cyber Disclosure Guidelines Mean For Your Business Discover the challenges the new SEC cybersecurity guidelines present for your CISO and learn tips on how to handle them at your organization. Yaki Faitelson 3 min read
  131. Varonis Products Aug 28, 2024 What’s New in Varonis: August 2024 Learn more about Varonis’ new AI data classification, EDR integrations, MDDR executive dashboard, Azure permissions analysis, and more. Shane Walsh 2 min read
  132. Cloud Security Aug 22, 2024 AWS Misconfigurations Lead to Exposed Data Discover how a recent data extortion campaign exposed sensitive files in thousands of AWS environments and what you can do to prevent it from happening to you. Varonis Threat Labs 3 min read
  133. Data Security Aug 21, 2024 Speed Data: Pentesting and Proactive Threat Hunting With Tim Callahan Aflac CISO Tim Callahan shares his favorite aspects of cybersecurity and what challenges him the most. Megan Garza 2 min read
  134. AI Security Privacy & Compliance Aug 16, 2024 The EU AI Act: What It Is and Why It’s Important Learn about the world's first comprehensive AI regulation, the requirements businesses must follow when deploying AI, and how to stay compliant. Amanda Wicks 5 min read
  135. Varonis Products Aug 07, 2024 Varonis Announces Integrations With SentinelOne and Microsoft Defender for Endpoint Varonis now integrates with leading EDR providers Microsoft Defender for Endpoint and SentinelOne, expanding our MDDR visibility to customers’ endpoints. Shane Walsh 1 min read
  136. Data Security Varonis Products Aug 06, 2024 Overview of Varonis AI-Powered Data Discovery and Classification Varonis' LLM-driven data scanning gives customers a deeper business context with unmatched precision and scale. Rob Sobers 3 min read
  137. Varonis Products Jul 25, 2024 What's New in Varonis: July 2024 Learn more about Varonis’ New NoSQL database support and expanded Salesforce exposure remediations. Nathan Coppinger 2 min read
  138. AI Security Data Security Jul 22, 2024 Speed Data: AWS, Gen AI, and SecDataOps With Jonathan Rau The VP and Distinguished Engineer at Query explains what most organizations get wrong about cloud security. Megan Garza 3 min read
  139. Data Security Jul 19, 2024 CrowdStrike Blue Screen Recovery Steps Updates and recovery steps for the Windows blue screen of death (BSOD) issue currently affecting devices and VMs running CrowdStrike Falcon Sensor. Varonis Threat Labs 3 min read
  140. Threat Research Jul 18, 2024 The Power and Peril of RMM Tools Discover real-world examples of remote monitoring and management (RMM) tool exploits and how to protect your organization from these attacks. Tom Barnea 4 min read
  141. Email Security Jul 11, 2024 FishXProxy Phishing Kit: Lowering Barriers for Cybercriminals Learn about the FishXProxy Phishing Kit, a phishing tool that even novice cybercriminals can take advantage of, and how organizations can combat this new tool. Daniel Kelley 4 min read
  142. AI Security Featured Jul 09, 2024 Varonis Accelerates the Secure Adoption of Microsoft Copilot for Microsoft 365 Varonis and Microsoft forged a new strategic collaboration to help organizations safely harness one of the most powerful productivity tools on the planet — Microsoft Copilot for Microsoft
  143. Data Security Jul 09, 2024 Speed Data: Tips for Safeguarding Sensitive Data With Jon Densmore Jon Densmore, the CISO for First Mutual Holding Company, shares the best way to prepare for a breach. Megan Garza 2 min read
  144. AI Security Salesforce Jul 03, 2024 Salesforce Agentforce: Boosting Productivity With a Focus on Security AI tools like Salesforce Agentforce, formerly known as Einstien Copilot, can improve efficiency but also expose you to risk without proper security. Tomer Ronen 2 min read
  145. Threat Research Jul 02, 2024 OpenSSH 'RegreSSHion' RCE Vulnerability A critical vulnerability in OpenSSH's server, dubbed 'regreSSHion,' raises the risk of remote code execution with root privileges. Jason Hill 4 min read
  146. AI Security Data Security Jun 28, 2024 Why Your Org Needs a Copilot Security Scan Before Deploying AI Tools Assessing your security posture before deploying gen AI tools like Copilot for Microsoft 365 is a crucial first step. Lexi Croisdale 3 min read
  147. Data Security Jun 27, 2024 Varonis Achieves "In Process" Status for FedRAMP® Authorization Varonis announces "in process" status for FedRAMP® authorization, continuing to provide robust data security solutions for agencies and public-sector organizations nationwide. Craig Mueller 2 min read
  148. Varonis Products Jun 27, 2024 Integrate Data-Centric Insights Into Your Security Workflows Using Webhooks Use webhooks to easily integrate Varonis’ unique, data-centric insights into your security stack to consolidate monitoring and enhance security workflows. Nathan Coppinger 2 min read
  149. Varonis Products Jun 27, 2024 What’s new in Varonis: June 2024 This month, we released new updates designed to help you accelerate security workflows, automate your DSPM efforts, and manage shadow databases. Nathan Coppinger 2 min read
  150. Data Security Jun 26, 2024 Speed Data: The (Non)Malicious Insider With Rachel Beard Salesforce's Rachel Beard discusses why insider threats may not always have ill intentions and why security in the CRM is crucial. Megan Garza 2 min read
  151. Salesforce Varonis Products Jun 25, 2024 Protecting Salesforce: Preventing Public Link Creation Identify and prevent the creation of Salesforce public links and reduce your blast radius with Varonis. Nathan Coppinger 2 min read
  152. Cloud Security Jun 21, 2024 Cloud Security Essentials: The Case for Automated DSPM One cloud misconfiguration can expose millions of records. Discover why automated DSPM is critical for securing sensitive data in modern cloud environments. Nolan Necoechea 3 min read
  153. Varonis Products Jun 12, 2024 Varonis Adds Automated Remediation for AWS to Industry-Leading DSPM Capabilities New automation remediates public exposure and removes stale users, roles, and access keys in AWS, cementing Varonis as the only Data Security Platform with active DSPM capabilities. Nathan
  154. Varonis Products Jun 12, 2024 Discover Shadow Databases With Varonis’ Industry-Leading DSPM Varonis now enables organizations to close significant security gaps by discovering and remediating “shadow” databases across AWS environments. Nathan Coppinger 2 min read
  155. Data Security Jun 11, 2024 Speed Data: Why Your Team is Your Greatest Cybersecurity Tool With Terry Inns The Group Director of Operations Support for Jacobs shares his insights based on years of experience in the field. Megan Garza 2 min read
  156. Data Security Jun 06, 2024 A Practical Guide to Safely Deploying Gen AI Varonis and Jeff Pollard, Forrester Security and Risk Analyst, share insights into how to securely integrate generative AI into your organization. Megan Garza 3 min read
  157. Threat Research Jun 04, 2024 Targeted Campaign Against Snowflake Customers: What You Need to Know Recent data breaches of prominent Snowflake cloud customers highlight the risks of compromised cloud storage accounts. Varonis Threat Labs 4 min read
  158. DSPM May 31, 2024 What is Data Security Posture Management (DSPM)? Learn what data security posture management (DSPM) is and isn't, why it’s important, how it works, and how to evaluate DSPM solutions. Nolan Necoechea 7 min read
  159. AI Security May 30, 2024 How to Prevent Your First AI Data Breach Learn how the broad use of gen AI copilots will inevitably increase data breaches, which Varonis' Matt Radolec shared in an RSA Conference 2024 Keynote session. Nolan Necoechea 3 min read
  160. Varonis Products May 30, 2024 What's New in Varonis: May 2024 Varonis brings a UI refresh, easier policy management, expanded automated remediation capabilities in AWS, automation rollback, and privacy automation. Shane Walsh 1 min read
  161. Data Security May 29, 2024 Speed Data: Exploring the Virtual CISO Role With Robert Blythe Bob Blythe talks about the virtual CISO market, gen AI, and where the future of tech is headed. Megan Garza 2 min read
  162. Data Security May 24, 2024 How Varonis Helps Schools Secure Data K–12 schools, school districts, and universities rely on Varonis to combat threat actors, prevent breaches, and continuously improve their data security posture. Megan Garza 3 min read
  163. Data Security May 15, 2024 Varonis Leaders Shine as CRN’s Women of the Channel The leading source for channel news honored three Varonis team members. Megan Garza 2 min read
  164. Data Security May 14, 2024 Speed Data: Developing ‘Security as a Service’ With Alexis Bonnell Alexis Bonnell, CIO for the U.S. Air Force Research Laboratory, shares her thoughts on the relationship between knowledge and AI. Megan Garza 3 min read
  165. AI Security Varonis Products May 07, 2024 Overview of Varonis for Microsoft 365 Copilot Varonis for Microsoft 365 Copilot is the industry's first purpose-built cybersecurity solution to secure Microsoft’s AI-powered productivity tool before and after deployment. Rob Sobers 3 min read
  166. Threat Research May 03, 2024 Dropbox Sign Data Breach: What You Need to Know Dropbox Sign's recent data breach highlights how non-human identities are driving more profound breaches. Omri Marom 3 min read
  167. Data Security Apr 30, 2024 Data Classification Buyer's Guide: How to Choose a Data Classification Solution Understand the different data classification offerings available, why traditional efforts fail, and what top 5 elements to consider when choosing a vendor. Megan Garza 9 min read
  168. Varonis Products Apr 30, 2024 What's New in Varonis: April 2024 Learn more about Varonis for Microsoft 365 Copilot, new security posture reporting, and more about our new MDDR service. Shane Walsh 2 min read
  169. Data Security Apr 23, 2024 Speed Data: Security Leaders, Salesforce, and Social Consciousness With Doug Merrett Doug Merrett of Platinum7 shares his thoughts on the importance of education, philanthropy, and realistic expectations in the tech world. Megan Garza 3 min read
  170. AI Security Apr 18, 2024 Is Microsoft Copilot Worth the Investment? Is Microsoft Copilot worth the investment? Varonis experts weigh in on the ROI of the powerful generative AI tool based on Forrester Research's latest study. Megan Garza 3 min read
  171. Threat Research Apr 11, 2024 Sisense Data Breach: What You Need to Know The U.S. Cybersecurity and Infrastructure Agency (CISA) issued an alert this week warning Sisense customers of a data breach. Here's what you need to know. Varonis Threat Labs 2 min read
  172. Data Security Apr 09, 2024 Speed Data: Combating the Cybersecurity Skills Shortage With Bryan Chnowski Bryan Chnowski, Deputy CISO for Nuvance Health, explains why one of the most significant cybersecurity risks on the horizon is the shortage of workers. Megan Garza 2 min read
  173. Threat Research Apr 09, 2024 Sidestepping SharePoint Security: Two New Techniques to Evade Exfiltration Detection Varonis Threat Labs discovered two techniques in SharePoint that allow users to circumvent audit logs and avoid triggering download events while exfiltrating files. Eric Saraga 6 min rea
  174. Threat Research Apr 05, 2024 XZ Backdoor: Supply Chain Jump Scare While the XZ backdoor is scary, most companies learned from SolarWinds Varonis Threat Labs 4 min read
  175. Data Security Apr 03, 2024 Know Before You Go: Your Guide to RSAC 2024 Discover what sessions, events, and activities should be added to your RSA Conference 2024 agenda. Kilian Englert 6 min read
  176. Data Security Mar 29, 2024 Speed Data: The Benefits of Simplicity With Mark Bruns CISO Mark Burns shares cybersecurity knowledge amassed over 25 years, the pros and cons of gen AI, how to protect data, and why compromise is key. Megan Garza 2 min read
  177. Varonis Products Mar 28, 2024 What's New in Varonis: March 2024 Varonis unveiled updates designed to help you detect and investigate threats, improve your Salesforce and Azure security posture, and streamline your data discovery requests. Nathan Coppinger 3 min read
  178. Data Security Mar 26, 2024 What is Managed Data Detection and Response (MDDR)? XDR and MDR offerings are threat-focused and leave you data-blind. Varonis MDDR helps mitigate complex threats to your most valuable asset: data. Mike Thompson 3 min read
  179. Threat Research Mar 20, 2024 Increased Threat Activity Targeting Ivanti Vulnerabilities A recent surge in activity targeting Ivanti Connect Secure (ICS) involves chaining two vulnerabilities that give threat actors the ability to execute arbitrary commands remotely. Jason Hill 2 min read
  180. AI Security Mar 15, 2024 6 Prompts You Don't Want Employees Putting in Copilot Discover what simple prompts could expose your company’s sensitive data in Microsoft Copilot. Brian Vecci 3 min read
  181. AI Security Data Security Mar 12, 2024 Generative AI Security: Preparing for Salesforce Agentforce See how Salesforce Agentforce's (formerly Einstein Copilot) security model works and the risks you must mitigate to ensure a safe and secure rollout. Collaborative Article 4 min read
  182. DSPM Mar 11, 2024 The DSPM Buyer's Guide: How to Evaluate a DSPM Solution With AI agents now able to act on sensitive data, learn how to evaluate DSPM solutions, avoid vendor pitfalls, and choose the right platform. Rob Sobers 8 min read
  183. Data Security Mar 11, 2024 Speed Data: Preparing for the Unknown in Cybersecurity With Ian Hill Ian Hill, the Director of Information and Cybersecurity for Upp Telecommunications, offers his take on AI and the future of tech, shares his tricks for a good cyber defense, and explains why the best-laid
  184. Cloud Security Mar 07, 2024 Understanding and Applying the Shared Responsibility Model at Your Organization To avoid significant security gaps and risks to sensitive data, organizations need to understand the shared responsibility model used by many SaaS providers. Tristan Grush 2 min read
  185. Varonis Products Mar 05, 2024 Varonis MDDR: Industry's First Managed Data Detection and Response Offering Varonis MDDR introduces a new 24x7x365 threat detection and response service built to stop data breaches. Rob Sobers 1 min read
  186. Data Security Feb 27, 2024 Speed Data: Film, Foodies, and the Future of Tech With David Ulloa Dr. David Ulloa, Chief Security Information Officer at IMC Companies, shares the best line of defense against a sophisticated threat actor. Megan Garza 2 min read
  187. Varonis Products Feb 26, 2024 What’s New in Varonis: Feb 2024 Improve your data security posture management efforts with this month's updates to the Varonis Data Security Platform. Nathan Coppinger 2 min read
  188. Data Security Feb 20, 2024 Varonis joins Marsh McLennan Agency’s Cyber Resiliency Network Varonis is teaming up with Marsh McLennan Agency. Together, we'll help organizations improve their cyber resilience with industry-leading DSPM solutions. Matt Radolec 1 min read
  189. Threat Research Feb 20, 2024 Security Vulnerabilities in Apex Code Could Leak Salesforce Data Varonis' threat researchers identified high- and critical-severity vulnerabilities in Apex, a programming language for customizing Salesforce instances. Nitay Bachrach 7 min read
  190. Data Security Feb 13, 2024 Speed Data: Thinking From a Cyberattacker's Perspective With Dalal Alharthi Dr. Dalal Alharthi talks about the importance of organizations anticipating a breach and seeing the world through the eyes of an attacker. Megan Garza 2 min read
  191. Data Security Feb 12, 2024 Behind the Varonis Rebrand Discover the strategy behind Varonis' rebrand that involved a full transition to a hero archetype and the introduction of Protector 22814. Courtney Bernard 3 min read
  192. Varonis Products Feb 06, 2024 Automatically Remove Salesforce Public Links with Varonis Varonis’ least privilege automation capabilities now remove public Salesforce links automatically. Nathan Coppinger 2 min read
  193. Data Security Feb 01, 2024 Speed Data: Hiring the Right Cybersecurity Professionals With Leah McLean Cofounder of the nonprofit Whole Cyber Human Initiative, Leah McLean, shares her advice for recruiting teams looking for cybersecurity superstars and why it’s so important for women to have represent
  194. Varonis Products Jan 31, 2024 What’s new in Varonis: Jan 2024 This month brings you a fresh set of updates designed to improve your cybersecurity journey. Yumna Moazzam 4 min read
  195. Varonis Products Jan 30, 2024 Varonis Introduces Universal Classification Support for Databases Integrate Varonis with virtually any network-connected database to discover and classify sensitive data at scale with pinpoint accuracy. Nathan Coppinger 1 min read
  196. Varonis Products Jan 24, 2024 How Varonis Helps Secure Critical Snowflake Data Varonis supports Snowflake, providing enhanced visibility and data security for critical Snowflake data. Nathan Coppinger 3 min read
  197. Threat Research Jan 18, 2024 Outlook Vulnerability Discovery and New Ways to Leak NTLM Hashes Varonis Threat Labs discovered a new Outlook exploit and three new ways to access NTLM v2 hashed passwords. Dolev Taler 7 min read
  198. Data Security Jan 18, 2024 Speed Data: When Lives Depend on Strong Security With John Mason Tempo Technology Services' John Mason shares why strong cybersecurity in healthcare is so critical and how organizations can combat malicious actors. Megan Garza 2 min read
  199. Varonis Products Jan 12, 2024 Varonis Named a Leader in GigaOm’s 2023 Radar Report for Data Security Platforms Varonis is proud to be named a Leader in GigaOm’s first-ever Radar Report for Data Security Platforms. Nathan Coppinger 3 min read
  200. Privacy & Compliance Jan 04, 2024 Speed Data: The Principles of GRC With Hannah DeWane Hannah DeWane at Varonis shares her day-to-day world of security audits and the wonderful world of risk management. Megan Garza 1 min read
  201. Data Security Dec 26, 2023 2024 Cybersecurity Trends: What You Need to Know Learn more about data security posture management, AI security risks, compliance changes, and more to prepare your 2024 cybersecurity strategy. Lexi Croisdale 5 min read
  202. Featured Varonis Products Dec 19, 2023 What’s new in Varonis: December 2023 This month brings you several new features to help security teams manage and secure their critical cloud data. Nathan Coppinger 2 min read
  203. Data Security Dec 14, 2023 Straight From the CISO: Top Tips for Today's Cybersecurity Leaders We’ve gained massive insight from our conversations with CISOs and other cybersecurity leaders. Now, we're passing along their wisdom to you. Megan Garza 4 min read
  204. Varonis Products Dec 14, 2023 Varonis Joins Salesforce AppExchange The Varonis Data Security Platform can now be found on the Salesforce AppExchange Nathan Coppinger 1 min read
  205. Data Security Federal Dec 13, 2023 Navigating the Complex Landscape of Data Protection in the Federal Sector Varonis' Justin Wilkins and Trevor Brenn highlight the importance of data security for the federal sector, the risks of gen AI, and more. Lexi Croisdale 3 min read
  206. AI Security Dec 12, 2023 Is Your Org Ready for Microsoft Copilot? Enjoy this step-by-step guide showing you how to deploy generative AI tools safely with Varonis. Brian Vecci 9 min read
  207. Varonis Products Dec 05, 2023 Varonis Expands DSPM Capabilities with Deeper Azure and AWS Support Varonis is expanding its IaaS coverage to AWS databases and Azure Blob Storage, strengthening the CSPM and DSPM pillars of our Data Security Platform. Nathan Coppinger 4 min read
  208. Data Security Nov 21, 2023 Speed Data: The Next Generation of Cybersecurity With Mark Weber Executive in Residence for the Catholic University of America Mark Weber shares tips for mentoring future cybersecurity professionals. Megan Garza 2 min read
  209. Varonis Products Nov 20, 2023 How Varonis Helps With Email Security Discover how you can proactively reduce your email attack surface, stop data exfiltration, and curb gen AI risk with accurate and automated email security. Yumna Moazzam 3 min read
  210. Varonis Products Nov 14, 2023 Varonis Introduces Athena AI to Transform Data Security and Incident Response Using Athena AI, the new gen AI layer for Varonis, natural language, customers can conduct in-depth security investigations and analyses more efficiently. Avia Navickas 3 min read
  211. Varonis Products Nov 07, 2023 What's New in Varonis: November 2023 This month, Varonis’ Data Security Platform gets new features for accelerating investigations, improving your email security posture, and enabling Zero Trust in hybrid environments. Yumna Moazzam 2 min read
  212. Data Security Nov 06, 2023 Speed Data: Fusing Empathy and Enterprise With Illena Armstrong Illena Armstrong shares her advice for future executives, discusses the importance of teamwork, and explains why empathy is powerful for leaders. Megan Garza 2 min read
  213. AI Security Oct 31, 2023 AI at Work: Three Steps to Prepare and Protect Your Business Discover how your business can prepare and protect your sensitive data from the risks that generative AI presents. Yaki Faitelson 3 min read
  214. Cloud Security DSPM Oct 27, 2023 DSPM vs. CSPM Discover key differences, benefits, and how combining data and cloud security posture management protects your cloud and sensitive data. Nathan Coppinger 7 min read
  215. Data Security Oct 24, 2023 Speed Data: The Importance of Asking for Help With Michelle Griffey Michelle Griffey, Chief Risk Officer for Communisis, shares the importance of asking for help and how the widespread adoption of AI is a good and bad thing. Megan Garza 2 min read
  216. Data Security Oct 23, 2023 What is a Data Risk Assessment and Why You Should Take One Conducting a Data Risk Assessment can help your organization map its sensitive data and build out a comprehensive security strategy. Here's how to perform it. Lexi Croisdale 7 min read
  217. Data Security Oct 13, 2023 How Varonis’ Data Risk Assessment Works Explore how Varonis' free Data Risk Assessment works and what makes it the most advanced DRA in the industry. Ensure your data is protected today. Lexi Croisdale 7 min read
  218. Data Security Oct 11, 2023 Speed Data: Behind the Scenes of Cyber Insurance Recovery With Scott Godes Scott Godes, Insurance Recovery Litigator for Barnes & Thornburg LLP, chats about the importance of cyber insurance, and how data privacy has evolved. Megan Garza 2 min read
  219. Varonis Products Oct 11, 2023 Varonis Launches Data Center in Canada for Cloud-Native Security We're excited to announce the opening of our data center in Toronto to support new customers and existing customers moving to Varonis' SaaS offering. Rachel Hunt 1 min read
  220. Privacy & Compliance Oct 05, 2023 CMMC 2.0: How Varonis Ensures Certification for Defense Contractors Varonis can help you achieve compliance and implement the Cybersecurity Maturity Model Certification 2.0 (CMMC) program to safeguard cybersecurity across the government’s DIB. Meagan Huebner 6 min r
  221. Data Security Sep 27, 2023 Speed Data: Why Cybersecurity is an Unceasing Progression With Siwar El Assad Siwar El Assad chats about the impact of cybersecurity on modern society, the reality of breaches, and how a chance encounter led Siwar to the industry. Megan Garza 2 min read
  222. DSPM Data Security Sep 21, 2023 DSPM Deep Dive: Debunking Data Security Myths DSPM is the leading acronym in cybersecurity. However, the recent buzz has cluttered the meaning of data security posture management. Let's demystify it. Meagan Huebner 4 min read
  223. Varonis Products Sep 13, 2023 Varonis Announces Salesforce Shield Integration Varonis now integrates with Salesforce Shield to provide deep visibility into Salesforce and help organizations secure their mission-critical data. Nathan Coppinger 3 min read
  224. Data Security Sep 11, 2023 Speed Data: Rethinking Traditional Cybersecurity Principles With Rick Howard Rick Howard, author, journalist, and Senior Fellow at the CyberWire, chats about his new book on rebooting cybersecurity principles with Varonis' Megan Garza. Megan Garza 2 min read
  225. Data Security Sep 08, 2023 The Benefits of Threat and Data Breach Reports Threat and data breach reports can help organizations manage security risks and develop mitigation strategies. Learn our three pillars of effective data protection and the benefits from these reports. Scott Shafer 2 min read
  226. Salesforce Sep 05, 2023 The Biggest Security Risks to Your Salesforce Org Discover how Salesforce professionals and security teams can combat the most concerning risks in their environments. Lexi Croisdale 4 min read
  227. Data Security Sep 02, 2023 Three Ways Varonis Helps You Fight Insider Threats Insider threats are difficult for organizations to combat. Varonis’ modern cybersecurity answer uses the data security triad of sensitivity, access, and activity to combat threats. Shane Walsh 4 min read
  228. Data Security Federal Aug 30, 2023 Speed Data: Tackling Federal Cybersecurity Challenges With AJ Forysiak Building networks with military, civilian, and intelligence community leaders is just part of AJ’s day-to-day as the Business Development Executive for the Varonis Department of Defense team. Me
  229. Varonis Products Aug 29, 2023 Varonis Opens UK Data Centre to Support SaaS Customers UK expansion will help Varonis customers demonstrate compliance with the U.K.’s Data Protection Act. Rachel Hunt 1 min read
  230. AI Security Aug 28, 2023 Rewards and Risks: Why Generative AI Security is Essential Learn the most significant gains of gen AI and what security risks you should be concerned with before deploying AI tools at your org. Lexi Croisdale 7 min read
  231. Data Security Aug 23, 2023 A CISO's First 90 Days: The Ultimate Action Plan and Advice Over the last 10 years, the role of the CISO has become pretty complex. By the end of this blog you'll have a solid 90-day plan to step into a new CISO role. Avia Navickas 8 min read
  232. Data Security Aug 15, 2023 Speed Data: Bringing Resiliency and Passion to Cybersecurity with Kieron Newsham Kieron Newsham, Chief Technologist of Cybersecurity for Softcat, shares how his military background helps him in his role and his passion for security. Megan Garza 2 min read
  233. AI Security Data Security Aug 08, 2023 Copilot Security: Ensuring a Secure Microsoft Copilot Rollout This article describes how Microsoft 365 Copilot's security model works and the risks that must be considered to ensure a safe rollout. Rob Sobers 5 min read
  234. Varonis Products Aug 07, 2023 What’s new in Varonis: August 2023 This month brings you several new features to help security teams enforce Zero Trust across their cloud and on-prem environments. Yumna Moazzam 2 min read
  235. Data Security Aug 02, 2023 SEC Cybersecurity Disclosure Requirements’ Impact on Your Business New SEC regulations change how public companies disclose hacks, breaches, and cyber incidents. Here’s everything you need to know. Rob Sobers 7 min read
  236. Cloud Security Data Security Aug 02, 2023 Is Your Data Insider-Proof? Five Steps To Keep Your Secrets Safe This article explains the five steps you can take to see how prepared you are for a nefarious insider or an outside attacker that compromises an insider's account or computer. Yaki Faitelson 3
  237. Data Security Jul 25, 2023 Speed Data: The Impact of AI on Attack Vectors With Justin Michael Corbin Capital Partners CTO Justin Michael discusses the hot topic of ChatGPT. Justin leads guarding sensitive data for the leading asset management firm. Megan Garza 2 min read
  238. Threat Research Jul 18, 2023 Taking Microsoft Office by "Storm" The “Storm-0978” ransomware group is actively exploiting an unpatched Microsoft Office and Windows HTML remote code execution vulnerability. Jason Hill 3 min read
  239. Data Security Jul 13, 2023 Strengthening Resilience: Data Security vs Data Resilience Tools Learn the difference between backup tools and true DSPs and what to look for when you’re choosing a DSP. Nathan Coppinger 6 min read
  240. Threat Research Jul 13, 2023 WormGPT — The Generative AI Tool Cybercriminals Are Using to Launch Business Email Compromise Attacks Explore how generative AI advances BEC attacks and discover key strategies for organizations to defend against sophisticated, AI-powered threats. Daniel Kelley 3 min rea
  241. Data Security Jul 10, 2023 Speed Data: The Importance of Data Privacy With Jordan McClintick Jordan McClintick, Director of Data Governance and Privacy for Optiv, Inc. talks about how his law degree helps him in his current role in data privacy. Megan Garza 3 min read
  242. Varonis Products Jul 10, 2023 Varonis' Scalable Cloud-Native Architecture How we built our cloud-native SaaS platform for scalability and security — without taking any shortcuts. John Neystadt 5 min read
  243. Data Security Federal Jun 29, 2023 How the MOVEit Vulnerability Impacts Federal Government Agencies Our latest State of Cybercrime episode examines the MOVEit vulnerability and its impact on victims, including federal government agencies. Megan Garza 3 min read
  244. Varonis Products Jun 28, 2023 What’s new in Varonis: June 2023 This month brings more cloud security features to help you better govern your SaaS and IaaS security posture. Yumna Moazzam 2 min read
  245. Ransomware Jun 21, 2023 Speed Data: The Commoditization of Cybercrime With Matt Radolec Matt Radolec at Varonis discusses the future of cybersecurity, the rise of ransomware-as-a-service (RaaS), and what security risks keep him up at night. Megan Garza 2 min read
  246. Threat Research Jun 07, 2023 Imposter Syndrome: UI Bug in Visual Studio Lets Attackers Impersonate Publishers Varonis Threat Labs found a bug in Microsoft Visual Studio installer that allows an attacker to impersonate a publisher and issue a malicious extension to compromise a targeted system Dolev
  247. Threat Research May 31, 2023 Ghost Sites: Stealing Data From Deactivated Salesforce Communities Varonis Threat Labs discovered improperly deactivated Salesforce 'ghost' Sites that are easily found, accessible, and exploitable by attackers. Nitay Bachrach 2 min read
  248. Data Security May 30, 2023 Speed Data: CISO Leadership Tips With Pat Benoit Pat shared the four leadership rules he follows, what it takes to succeed in cybersecurity, and why he just might be “The Most Interesting Man in the World.” Megan Garza 2 min read
  249. Varonis Products May 30, 2023 What's New in Varonis: May 2023 Check out the new features that help security teams automatically enforce least privilege and uniformly apply sensitivity labels across their hybrid cloud and on-prem environments. Yumna Moazzam 2 min read
  250. Privacy & Compliance May 22, 2023 Meta's $1.3B Fine: What can Happen if you Don’t Monitor Your PII Continuous discovery and data monitoring critical to identify misplaced PII. Brian Vecci 2 min read
  251. Cloud Security Data Security May 03, 2023 What Automation Means For Cybersecurity—And Your Business This article explains how automation can help turn the right information into action, helping to defend against cyberattacks, mitigate risk, shore up compliance and improve productivity. Yaki Faitelso
  252. Salesforce Apr 28, 2023 Salesforce Misconfiguration Causes Sensitive Data Leaks Brian Krebs recently reported that an alarming number of organizations—including banks and healthcare providers—are leaking sensitive information due to a misconfiguration in Salesforce Communities. Rob Sobers 1 min read
  253. Varonis Products Apr 25, 2023 Third-Party App Risk Management: Frameworks and Solutions A practical guide to reducing third-party SaaS app risk with clear steps for assessing permissions, removing unsafe apps, and ongoing monitoring. Nathan Coppinger 6 min read
  254. DSPM Data Security Apr 19, 2023 Data Security Posture Management (DSPM): Best Practices Guide for CISOs Master Data Security Posture Management (DSPM) best practices with our CISOs' guide. Learn to select the right tool, maintain compliance, and prevent data breaches. Rob Sobers 7 min read
  255. Varonis Products Apr 11, 2023 Varonis Opens Australia Data Centre to Support SaaS Customers Australian expansion allows Varonis customers to achieve automated data security outcomes while following national standards for data privacy. Rachel Hunt 1 min read
  256. Data Security Apr 11, 2023 The Exact Data Security Roadmap We've Used with 7,000+ CISOs Explore the Varonis data security roadmap for modern protection, aiding 7,000+ CISOs in compliance and safeguarding valuable data. Rob Sobers 7 min read
  257. Data Security Mar 22, 2023 Varonis Named a Leader in The Forrester Wave™: Data Security Platforms, Q1 2023 Varonis Named a Leader in the Forrester Wave™: Data Security Platforms, Q1 2023, receiving the highest score in the strategy category. Avia Navickas 2 min read
  258. Data Security Mar 10, 2023 A Step-By-Step Guide to California Consumer Privacy Act (CCPA) Compliance CCPA Compliance: Everything you need to know about protecting user data under the California Consumer Privacy Act. David Harrington 10 min read
  259. Data Security Privacy & Compliance Mar 10, 2023 HIPAA Compliance: Your Complete 2025 Checklist Is your organization ready to comply with 2025 HIPAA updates and changes? Ensure HIPAA compliance with our comprehensive checklist. Daniel Miller 12 min read
  260. Salesforce Varonis Products Mar 08, 2023 How Varonis Saves Salesforce Admins Hours in Their Day Varonis provides industry leading Salesforce management and permission implications capabilities to help save Salesforce admins hours in their day. Nathan Coppinger 7 min read
  261. Threat Research Feb 20, 2023 HardBit 2.0 Ransomware HardBit is a ransomware threat that targets organizations to extort cryptocurrency payments for the decryption of their data. Seemingly improving upon their initial release, HardBit version 2.0 was introduced toward the end of November 2022, with s
  262. Threat Research Feb 08, 2023 Neo4jection: Secrets, Data, and Cloud Exploits With the continuous rise of graph databases, especially Neo4j, we're seeing increased discussions among security researchers about issues found in those databases. However, given our experience with graph databases ― from de
  263. Threat Research Feb 07, 2023 VMware ESXi in the Line of Ransomware Fire Servers running the popular virtualization hypervisor VMware ESXi have come under attack from at least one ransomware group over the past week, likely following scanning activity to identify hosts with Open Service Location Prot
  264. Varonis Products Feb 07, 2023 Varonis Enhances GitHub Security Offering With Secrets Discovery and Data Classification Varonis is extending our world-class data classification capabilities to discover secrets, keys, and other sensitive data embedded in your GitHub repositories and source code. Natha
  265. Varonis Products Jan 26, 2023 Automated Posture Management: Fix Cloud Security Risks with One-Click Automated posture management helps teams spot and fix cloud security gaps fast, reducing misconfigurations and improving overall protection. Nathan Coppinger 4 min read
  266. Threat Research Jan 23, 2023 CrossTalk and Secret Agent: Two Attack Vectors on Okta's Identity Suite Varonis Threat Labs discovered and disclosed two attack vectors on Okta's identity suite: CrossTalk and Secret Agent. Tal Peleg and Nitay Bachrach 7 min read
  267. Varonis Products Jan 17, 2023 How To Automate Least Privilege for Microsoft 365, Google Drive, and Box See how automating least privilege cuts hidden access risks and strengthens security across growing cloud environments. Yumna Moazzam 6 min read
  268. DSPM Varonis Products Jan 03, 2023 The Perks of a Customized Customizable DSPM Dashboard Understand how a customizable DSPM dashboard helps track sensitive data exposure, misconfigurations, and identity risk across cloud environments. Nathan Coppinger 5 min read
  269. Ransomware Dec 01, 2022 Four Must-Know Cyber Tips for Your Business The real story behind today’s breaches is never about an isolated bad decision—it’s about the many decisions made long before a sleepy network administrator gets a call from an attacker. Yaki Faitelson 3 min read
  270. Threat Research Nov 15, 2022 Varonis Threat Labs Discovers SQLi and Access Flaws in Zendesk Varonis Threat Labs found a SQL injection vulnerability and a logical access flaw in Zendesk Explore, the reporting and analytics service in the popular customer service solution, Zendesk. Tal Peleg 3 min rea
  271. Data Security Nov 02, 2022 How to Investigate NTLM Brute Force Attacks Explore the process the Varonis Incident Response team follows to investigate NTLM Brute Force attacks, which are common incidents reported by customers. Matt Schiff 7 min read
  272. Threat Research Oct 25, 2022 The Logging Dead: Two Event Log Vulnerabilities Haunting Windows You don’t have to use Internet Explorer for its legacy to have left you vulnerable to LogCrusher and OverLog, a pair of Windows vulnerabilities discovered by the Varonis Threat Labs team. Dolev Taler 4 min
  273. Varonis Products Oct 24, 2022 Automate Data Security With Varonis Data-centric Insights and Cortex XSOAR Discover how to leverage Varonis data risk insights with Cortex XSOAR to accelerate investigations. Yumna Moazzam 2 min read
  274. Cloud Security Oct 14, 2022 What is IDOR (Insecure Direct Object Reference)? Insecure Direct Object References (IDOR) are common, potentially devastating vulnerabilities resulting from broken access control in web applications. Robert Grimmick 7 min read
  275. Active Directory Oct 05, 2022 Azure Managed Identities: Definition, Types, Benefits + Demonstration Use this guide to learn about Azure managed identities: What they are, how many types there are, and what benefits they offer, plus how they work. Neeraj Kumar 7 min read
  276. Privacy & Compliance Oct 03, 2022 PCI DSS 4.0 Requirements: Compliance Checklist Version 4.0 of the Payment Card Industry Data Security Standard (PCI DSS) is right around the corner. Prepare with our PCI DSS compliance checklist. Meagan Huebner 5 min read
  277. Varonis Products Sep 27, 2022 Varonis Adds Secrets Discovery for On-Prem and Cloud Data Stores Varonis can help you scan your environments for rogue secrets exposed in files and code stored on-prem and in the cloud. Rob Sobers 5 min read
  278. Threat Research Sep 15, 2022 Fighting Golden Ticket Attacks with Privileged Attribute Certificate (PAC) Learn how and why to control the Active Directory Environment state with PACRequestorEnforcement, the implications of doing so and how to detect Golden Ticket attacks happening in your network. Ma
  279. Varonis Products Sep 13, 2022 Compare Salesforce user permissions with ease DatAdvantage Cloud now enables admins to compare two Salesforce users’ effective permissions side-by-side with a simple click of a button. Nathan Coppinger 2 min read
  280. Data Security Sep 09, 2022 What Is a Data Leak? Definition and Prevention Tips Learn why data leaks can be devastating for companies and how you can defend against them. Nolan Necoechea 4 min read
  281. Data Security Sep 09, 2022 What Is Zero Trust? Architecture and Security Guide Zero trust is a security model that protects against both malicious insiders and external attacks that have breached your perimeter. Michael Buckbee 8 min read
  282. Privacy & Compliance Sep 02, 2022 U.S. Privacy Laws: The Complete Guide This guide breaks down the entirety of the U.S. privacy law ecosystem to help you understand the rights and obligations of citizens and businesses. David Harrington 9 min read
  283. Privacy & Compliance Aug 26, 2022 SOC 2 Compliance Definition & Checklist System and Organization Controls (SOC 2) compliance requires adherence to specific guidelines. This detailed definition and checklist can get you started. David Harrington 6 min read
  284. Data Security Aug 26, 2022 What is Mimikatz? The Beginner's Guide Mimikatz is an open-source application that allows users to view and save authentication credentials like Kerberos tickets. Michael Buckbee 4 min read
  285. Threat Research Aug 22, 2022 Anatomy of a SolidBit Ransomware Attack Solidbit is a ransomware variant derived from Yashma and containing elements of LockBit. Discover how Solidbit's capabilities, execution, what file types it targets, and how to tell if you're been infected. Jason Hill 6 min read
  286. Data Security Aug 19, 2022 How to Use Wireshark: Comprehensive Tutorial + Tips Learn how to use Wireshark, a widely-used network packet and analysis tool. This tutorial has everything from downloading to filters to packets. Kody Kinzie 7 min read
  287. Salesforce Aug 18, 2022 Your Sales Data Is Mission-Critical: Are You Protecting It? If you’re like many executives, you might assume your data is secure within those cloud applications. That’s a dangerous assumption, though. Cloud providers are responsible for everything that delivers their applicat
  288. Varonis Products Aug 17, 2022 Varonis Maps Cloud Security Alerts to MITRE ATT&CK In Varonis’ latest update of DatAdvantage Cloud, we’re layering MITRE ATT&CK tactics and techniques over cloud alerts to aid in faster incident response. Yumna Moazzam 2 min read
  289. Cloud Security Jul 22, 2022 How to Create S3 Buckets in AWS with CloudFormation: Step-by-Step Guide Use AWS CloudFormation to create resources such as S3 buckets. Infrastructure as code enables a repeatable, reliable deployment process. Learn more here. Daniel Miller 6 min read
  290. Data Security Jul 22, 2022 What Is SQL Injection? Identification & Prevention Tips SQL injection is a serious open web application security project (OWASP) vulnerability. Learn more about how to combat injection attacks in this article. Alvin Mwambi 6 min read
  291. Privacy & Compliance Jul 22, 2022 What Is a Privacy Impact Assessment (PIA)? A privacy impact assessment (PIA) helps firms protect data. Find out about this robust approach to data loss prevention and how to implement your own PIA. David Harrington 6 min read
  292. Data Security Jul 08, 2022 What Is Data Lifecycle Management? Learn about data lifecycle management (DLM), its stages and benefits, and how to reduce ROT data, storage costs, and compliance risk. David Harrington 6 min read
  293. Data Security Jul 08, 2022 What is the CIA Triad? Learn how the CIA triad can be used to classify, secure, and protect your data. Josue Ledesma 5 min read
  294. Data Security Jul 08, 2022 139 Cybersecurity Statistics and Trends [updated 2025] These cybersecurity statistics for 2025 are grouped by category and include breaches, costs, crime type, compliance, industry-specific stats, & job outlook. Rob Sobers 12 min read
  295. Data Security Jul 07, 2022 What Is Network Access Control? Explaining NAC Solutions Explore network access control (NAC), a technology aimed at giving organizations more control over who can access their network and with what permissions. Robert Grimmick 10 min read
  296. Data Security Jul 05, 2022 Ransomware Statistics, Data, Trends, and Facts [updated 2026] Ransomware is one of the most common types of malware used in cyberattacks. Check out these comprehensive ransomware statistics, plus prevention tips. Rob Sobers 11 min read
  297. Data Security Jul 01, 2022 What is SSPM? Overview + Guide to SaaS Security Posture Management SaaS security posture management (SSPM) is an automated solution that helps bolster the protection of all SaaS applications used by organizations. David Harrington 8 min read
  298. Privacy & Compliance Jun 30, 2022 SOX Compliance Checklist & Audit Preparation Guide The Sarbanes-Oxley Act (SOX) requires public U.S. companies meet strict reporting and security standards. Here’s what you need to know to comply with SOX. David Harrington 9 min read
  299. Data Security Jun 30, 2022 IDS vs. IPS: What Organizations Need to Know We explore IDS vs. IPS and break down the differences between the two cybersecurity systems. Read on to evaluate using them in your network. Josue Ledesma 5 min read
  300. Data Security Jun 30, 2022 DNS over HTTPS as a covert Command and Control channel Learn how DNS over HTTPS (DoH) is being actively used as a Command and Control (C2) channel by threat actors. Masha Garmiza 4 min read
  301. Data Security Jun 29, 2022 What is Red Teaming? Methodology & Tools Red teaming simulates real-world hacks on your organization’s data and networks and spotlight vulnerabilities that help organizations strengthen security. David Harrington 11 min read
  302. Data Security Jun 29, 2022 What is a Security Policy? Definition, Elements, and Examples A security policy is a document that spells out principles and strategies for an organization to maintain the security of its information assets. Robert Grimmick 9 min read
  303. Data Security Jun 25, 2022 What is Traceroute? How It Works and How to Read Results Traceroute is a tool to trace the path of an IP packet as it traverses routers locally or globally. It is primarily used for diagnostic and troubleshooting purposes. Robert Grimmick 12 min read
  304. Ransomware Jun 25, 2022 Ryuk Ransomware: Breakdown and Prevention Tips Ryuk ransomware targets large organizations and spreads with deadly speed. Learn about the strain and how to prevent your company from becoming a victim. David Harrington 6 min read
  305. Data Security Jun 24, 2022 What is an Insider Threat? Definition and Examples Insider threats are internal risks to cybersecurity and data — learn more about insider threats, indicators, and how to detect them and prevent breaches. Robert Grimmick 7 min read
  306. Data Security Jun 24, 2022 Evil Twin Attack: What it is, How to Detect & Prevent it The evil twin attack takes advantage of public WiFi connections. Learn how to prevent it from reaching you and your devices. Josue Ledesma 5 min read
  307. Threat Research Jun 17, 2022 Anatomy of a LockBit Ransomware Attack A detailed case study of the exact techniques and methods that threat actors used in a real-life ransomware attack. Joseph Avanzato 8 min read
  308. Data Security Jun 16, 2022 What is Cyber Espionage? Complete Guide with Protection Tips Cyber espionage is the unauthorized use of computer networks to access privileged information. Read on to learn more about this growing worldwide problem. Robert Grimmick 11 min read
  309. Threat Research Jun 16, 2022 Rogue Shortcuts: LNK'ing to Badness Learn how threat actors continue to manipulate Windows shortcut files (LNKs) as an exploit technique. Jason Hill 5 min read
  310. Varonis Products Jun 15, 2022 Varonis Adds Data Classification Support for Amazon S3 Varonis bolsters cloud security offering with data classification for Amazon S3. Nathan Coppinger 5 min read
  311. Active Directory Jun 15, 2022 Group Policy Objects (GPOs): How They Work & Configuration Steps Group Policy Objects (GPOs) let system admins control and implement cybersecurity measures from a single location. Learn about GPOs and how they work here. David Harrington 6 min read
  312. Data Security Jun 15, 2022 Data Protection Guide: How To Secure Google Drive for Your Business Does your company store, handle, or transmit confidential data in Google Drive? Learn about security, encryption, and data protection in Google Workspace. David Harrington 7 min read
  313. Privacy & Compliance Jun 07, 2022 What Is Data Governance? Framework and Best Practices Data Governance helps organize, secure, and standardize data for all types of organizations. Learn more about data governance frameworks here. David Harrington 9 min read
  314. Privacy & Compliance Jun 03, 2022 ISO 27001 Compliance Guide: Essential Tips and Insights Looking to earn ISO 27001 compliance? Learn about this leading standard for information security management and how to become certified. Meagan Huebner 5 min read
  315. Federal Privacy & Compliance Jun 03, 2022 NIST 800-53: Definition and Tips for Compliance Learn best practices for adopting and implementing the NIST 800-53 framework, a compliance standard for federal agencies and partners. Meagan Huebner 6 min read
  316. Privacy & Compliance Jun 02, 2022 NIST 800-171 Compliance Checklist and Terminology Reference Government contractors who handle Controlled Unclassified Information (CUI) must be NIST 800-171 compliant. Use this checklist as a complete reference. David Harrington 9 min read
  317. Jun 02, 2022 How to Prepare for a Salesforce Permissions Audit In this post, I'll walk you through what a Salesforce audit is, how permissions work, and provide tips on how you can prepare. Mike Mason 5 min read
  318. Data Security May 20, 2022 Data Breach Statistics & Trends [updated 2025] These data breach statistics cover risk, cost, prevention and more — assess and analyze these stats to help prevent a data security incident. Rob Sobers 12 min read
  319. Ransomware May 16, 2022 Why Every Cybersecurity Leader Should ‘Assume Breach’ Any system, account or person at any time can be a potential attack vector. With such a vast attack surface, you need to assume attackers will breach at least one vector. Yaki Faitelson 3 min read
  320. Threat Research May 11, 2022 Spoofing SaaS Vanity URLs for Social Engineering Attacks SaaS vanity URLs can be spoofed and used for phishing campaigns and other attacks. In this article, we’ll showcase two Box link types, two Zoom link types, and two Google Docs link type that we were able to spoof.
  321. Ransomware May 06, 2022 Bad Rabbit Ransomware Bad Rabbit is a ransomware strain that spread via hacked websites, infected systems via a fake Adobe installer and held encrypted files for Bitcoin. Michael Raymond 3 min read
  322. Threat Research Apr 19, 2022 Hive Ransomware Analysis Learn how Hive ransomware exploits public servers, spreads through your network, encrypts sensitive files, and exports victims for cryptocurrency. Nadav Ovadia 7 min read
  323. Data Security Apr 12, 2022 How to Use Volatility for Memory Forensics and Analysis This article will cover what Volatility is, how to install Volatility, and most importantly how to use Volatility. Neil Fox 8 min read
  324. Data Security Apr 07, 2022 CCSP vs. CISSP: Which One Should You Take? Get an overview of the CCSP and CISSP exams and learn which certification is best for you and your career. Josue Ledesma 5 min read
  325. Data Security Apr 06, 2022 Unpacking NIST Cybersecurity Framework 2.0 Learn how you can implement the NIST Cybersecurity Framework (CSF) 2.0 within your own organization and how Varonis helps. Shawn Hays 8 min read
  326. Active Directory Apr 04, 2022 12 Group Policy Best Practices: Settings and Tips for Admins Group Policy configures settings, behavior, and privileges for user and computers. In this article, you’ll learn best practices when working with Group Policy. Jeff Brown 5 min read
  327. Data Security Mar 31, 2022 Your Guide to Simulated Cyberattacks: What is Penetration Testing? Penetration testing simulates a real-world cyber-attack on your critical data and systems. Here’s what penetration testing is, the processes and tools behind it, and how pen testing helps spot vulnerabiliti
  328. Data Security Mar 30, 2022 What is Terraform: Everything You Need to Know Terraform is an infrastructure-as-code (IaC) solution that helps DevOps teams manage multi-cloud deployments. Learn about what is Terraform, the benefits of IaC, and how to get started. David Harrington 5 min read
  329. Threat Research Mar 29, 2022 Defending Your Cloud Environment Against LAPSUS$-style Threats Varonis breaks down the recent LAPSUS$ hacks and provides best practices for defending your cloud environment against LAPSUS$ style threats Nathan Coppinger 6 min read
  330. Data Security Mar 21, 2022 How to Use Ghidra to Reverse Engineer Malware An overview of the malware analysis tool Ghidra. This article covers how to install and navigate the Ghidra interface. Neil Fox 7 min read
  331. Data Security Mar 18, 2022 What Is a Botnet? Definition and Prevention Learn why botnets can be so dangerous and what your organization can do to protect your IoT devices and network. Josue Ledesma 4 min read
  332. Threat Research Mar 11, 2022 Is this SID taken? Varonis Threat Labs Discovers Synthetic SID Injection Attack A technique where threat actors with existing high privileges can inject synthetic SIDs into an ACL creating backdoors and hidden permission grants. Eric Saraga 3 min read
  333. Threat Research Mar 04, 2022 ContiLeaks: Ransomware Gang Suffers Data Breach Conti, a prolific ransomware group, has suffered a leak of both internal chat transcripts and source code being shared by a reported Ukrainian member Jason Hill 6 min read
  334. Ransomware Feb 25, 2022 Ransomware-as-a-Service Explained: What is RaaS? Ransomware as a service (RaaS) is an emerging and potent cybersecurity threat to all organizations. If you’re unaware of how RaaS works, your system is potentially at risk. What RaaS is and how to guard against it. David Harrin
  335. Data Security Feb 25, 2022 Common Types of Malware This piece covers the various types of malware that are available and their characteristics. Neil Fox 7 min read
  336. Varonis Products Feb 23, 2022 Varonis adds SSPM functionality to DatAdvantage Cloud SaaS misconfigurations can unintentionally expose valuable corporate data. The new Insights Dashboard from Varonis helps you find and fix these security gaps. Avia Navickas 2 min read
  337. Data Security Feb 10, 2022 Identify and Investigate Business Email Compromise (BEC) Scams In this post, we'll review how to spot Business Email Compromise Scams and walk you through an investigation with Varonis. Ed Lin 9 min read
  338. Threat Research Feb 03, 2022 Ransomware Year in Review 2021 In this post, we dive into six ransomware trends that shaped 2021. Varonis Threat Labs 10 min read
  339. Threat Research Feb 02, 2022 Using Power Automate for Covert Data Exfiltration in Microsoft 365 How threat actors can use Microsoft Power Automate to automate data exfiltration, C2 communication, lateral movement, and evade DLP solutions. Eric Saraga 5 min read
  340. Threat Research Jan 26, 2022 BlackCat Ransomware (ALPHV) Varonis has observed the ALPHV (BlackCat) ransomware, actively recruiting new affiliates and targeting organizations across multiple sectors worldwide. Jason Hill 9 min read
  341. Varonis Products Jan 25, 2022 Varonis 8.6: Control Collaboration Chaos in Microsoft 365 Varonis is excited to announce Varonis Data Security Platform 8.6, with enhanced data security for Microsoft 365 to help find and fix collaboration risks. Nathan Coppinger 6 min read
  342. Ransomware Jan 24, 2022 What Every CEO Should Know About Modern Ransomware Attacks How To Make Yourself A Tougher Cybersecurity Target Yaki Faitelson 3 min read
  343. Threat Research Jan 18, 2022 Mixed Messages: Busting Box’s MFA Methods Varonis Threat Labs discovered a way to bypass multi-factor authentication (MFA) for Box accounts that use an SMS code for login verification. Tal Peleg 3 min read
  344. Threat Research Dec 02, 2021 Bypassing Box's Time-based One-Time Password MFA The Varonis research team discovered a way to bypass Box's Time-based One-Time Password MFA for Box accounts that use authenticator applications. Tal Peleg 2 min read
  345. Data Security Nov 18, 2021 How to Monitor Network Traffic: Effective Steps & Tips In this article, you will learn how to monitor network traffic using different tools and methods. David Harrington 4 min read
  346. Threat Research Nov 17, 2021 No Time to REST: Check Your Jira Permissions for Leaks Varonis researchers enumerated a list of 812 subdomains and found 689 accessible Jira instances. We found 3,774 public dashboards, 244 projects, and 75,629 issues containing email addresses, URLs, and IP... Omri Maro
  347. Data Security Nov 17, 2021 What is Role-Based Access Control (RBAC)? Role-Based Access Control (RBAC) is a security paradigm where users are granted access depending on their role in your organization. In this guide, we'll explain what RBAC is, and how to implement it. Neeraj Kumar 6 min read
  348. Data Security Nov 17, 2021 What is a Security Operations Center (SOC)? What is SOC security? In this article we'll dive into the functions of an SOC and why it's critical for the safety of your company's security and response to cybersecurity incidents. David Harrington 8 min read
  349. PowerShell Nov 03, 2021 How to Install and Import Active Directory PowerShell Module The Active Directory PowerShell module is a powerful tool for managing Active Directory. Learn how to install and import the module in this detailed tutorial! Jeff Brown 5 min read
  350. Threat Research Nov 02, 2021 Einstein's Wormhole: Capturing Outlook & Google Calendars via Salesforce Guest User Bug If your organization uses Salesforce Communities and Einstein Activity Capture, you might have unknowingly exposed your administrator's Outlook or Google calendar events to the intern
  351. Threat Research Nov 02, 2021 BlackMatter Ransomware: In-Depth Analysis & Recommendations CISA has issued a security bulletin regarding the BlackMatter 'big game hunter' ransomware group following a sharp increase in cases targeting U.S. businesses. To mitigate these attacks, it is recommended... Dvi
  352. Data Security Oct 29, 2021 Update 62 - SaaS Authentication Monitoring Evasion Businesses know they need to monitor their SaaS apps, but it's easy to get lulled into a false sense of security if you're relying on authentication monitoring as your only line of defense. Kilian Englert 1 min read
  353. Data Security Oct 25, 2021 The MITRE ATT&CK Framework: A Comprehensive Guide The MITRE ATT&CK framework helps businesses discover which hacker techniques, tactics, and behaviors they're most vulnerable to. Read about how to use ATT&CK for penetration testing within your organization today. David Har
  354. Data Security Threat Research Oct 21, 2021 Abusing Misconfigured Salesforce Experiences for Recon and Data Theft Our research team has discovered numerous publicly accessible Salesforce Experiences (formerly Salesforce Communities) that are misconfigured and expose sensitive information. Nitay Bachr
  355. Privacy & Compliance Oct 20, 2021 Illinois Privacy Law Compliance: What You Need to Know The Illinois Personal Information Protection Act (PIPA) is designed to safeguard the personal data of Illinois residents. Learn what PIPA is, who it affects, and how to maintain compliance. David Harrington 4 mi
  356. Threat Research Oct 19, 2021 Good for Evil: DeepBlueMagic Ransomware Group Abuses Legit Encryption Tools A group known as "DeepBlueMagic" is suspected of launching a ransomware attack against Hillel Yaffe Medical Center in Israel, violating a loose "code of conduct" that many ransomware groups opera
  357. Data Security Oct 19, 2021 ReConnect - Tackling SaaS Security Kilian Englert and Ryan O'Boyle from the Varonis Cloud Architecture team answer audience questions from the Virtual Connect event about how the CISO of a global communications firm approaches cloud security and minimizes risk across a wid
  358. Data Security Oct 15, 2021 Password Spraying: What to Do and Prevention Tips Using common or overly simplistic passwords can make users and organizations vulnerable to password spraying. Learn what password spraying attacks are, how they work, and what you can do to prevent one. David Harrington 8 m
  359. Data Security Oct 12, 2021 gMSA Guide: Group Managed Service Account Security & Deployment Learn about Group Managed Service Accounts (gMSAs), a type of managed service account, and how you can secure your on-premise devices. Josue Ledesma 5 min read
  360. Data Security Oct 06, 2021 PeStudio Overview: Setup, Tutorial and Tips An overview of the free malware analysis tool PeStudio. Neil Fox 6 min read
  361. Data Security Sep 28, 2021 Microsoft LAPS Overview: Setup, Installation, and Security Learn the basics of Microsoft LAPS to keep users from gaining unauthorized access to your system. Contact us for help with your data protection needs. David Harrington 5 min read
  362. Data Security Privacy & Compliance Sep 24, 2021 Varonis extends security capabilities to Nutanix Files The Varonis Data Security Platform now supports monitoring, alerting, and data classification in Nutanix Files, providing increased visibility and security over unstructured data. Monitor and secur
  363. Data Security Sep 21, 2021 The Ultimate Guide to Procmon: Everything You Need to Know Knowledge is power when it comes to maintaining a proactive cybersecurity posture. Knowing what’s going on within your systems and monitoring networks for potential issues, hacks, or malware is critical… David Harr
  364. Data Security Sep 21, 2021 Salesforce Security Guide: Best Practices Data breaches exposed 36 billion records in the first half of 2020. This number continues to increase as more businesses go online, with more knowledge workers working remotely in 2021…. Renganathan Padmanabhan 5 min read
  365. Data Security Sep 16, 2021 Google Workspace Data Protection Guide & Resources Google Workspace, formerly known as G Suite, dominated the office productivity suite space in 2020, with a 59 percent US market share. Businesses worldwide continue to trust Google’s productivity and… Renganathan Padmanabh
  366. Data Security Sep 15, 2021 Texas Privacy Act: Overview and Compliance Guide Many countries, states, and jurisdictions have recently passed — or are planning to pass — legislation to protect the privacy and data rights of consumers. The state of Texas is… David Harrington 5 min read
  367. Active Directory Aug 25, 2021 Securing Azure Blob Storage: Set-Up Guide Security is vital in today’s cloud-first environment. Cloud services are often enabled to solve an issue quickly, but no one goes back to verify if security best practices have been… Jeff Brown 7 min read
  368. Aug 24, 2021 Azure CLI Overview: Setup, Comparison, and Integration Tips The Azure CLI is a command-line tool for managing your Azure environment. This article covers the benefits of Azure CLI and how to get started using it! Jeff Brown 7 min read
  369. Cloud Security Aug 24, 2021 Introduction to AWS DevOps: Skills + Tools You Need Amazon Web Services has capabilities that help you accelerate Devops journey. In this article, we discuss the AWS tools, architecture and how they help organizations increase the ability to deliver and deploy application
  370. Data Security Aug 18, 2021 How to Fix Broken Registry Items: Visual Guide and Solutions Broken Registry Items can rarely cause a nonfunctional PC, but in many instances attempts to “clean” or optimize the registry will do more harm than good. Robert Grimmick 7 min read
  371. Ransomware Aug 16, 2021 What is Ransomware? Types and Definitions of Ransomware Attacks Ransomware attacks can result in significant loss of data, system functionality, and financial resources. But exactly what is ransomware? Ransomware can take a variety of shapes and forms, not to... David Harring
  372. Data Security Aug 11, 2021 Think Your Data Is Secure? Three Questions You Need To Answer Right Now As organizations become more data driven, they also store more data in more places and access it in more ways — with phones, tablets and laptops. These ever-connected endpoints serve as gateways to lar
  373. Data Security Aug 09, 2021 Understand and Implement Azure Monitor for Monitoring Workloads You always want your business-critical production applications to run without issues or downtime. To achieve this you need to continuously analyze system logs, monitor your application and their dependent serv
  374. Data Security Aug 09, 2021 Last Week in Ransomware: Week of August 9th This week saw the rise of a new ransomware group called BlackMatter and demonstrated even ransomware groups should worry about disgruntled employees. Michael Raymond 1 min read
  375. Data Security Aug 05, 2021 Packet Capture: What is it and What You Need to Know Packet capture describes the act of capturing IP packets for troubleshooting, security review, or other purposes. It can also be misused for nefarious purposes. Robert Grimmick 9 min read
  376. Data Security Aug 04, 2021 Your Comprehensive Guide to Salesforce Shield Salesforce Shield provides an excellent suite of tools for Salesforce data security. This guide explains why it might be the right choice for your enterprise security needs. Renganathan Padmanabhan 4 min read
  377. Data Security Aug 04, 2021 What is Two-Factor Authentication (2FA) and Why Should You Use It? Learn why 2FA is one of the most effective cybersecurity tools you can use across your organization. Josue Ledesma 5 min read
  378. Data Security Aug 04, 2021 What is Threat Modeling and How To Choose the Right Framework Learn why threat modeling is necessary for protecting your organization and how to choose the right framework for your specific needs. Josue Ledesma 5 min read
  379. Jul 26, 2021 Memory Forensics for Incident Response When responding to a cybersecurity incident I’ve always found memory forensics to be a great skill to have. By capturing the memory of a compromised device you can quickly perform… Neil Fox 6 min read
  380. Privacy & Compliance Jul 26, 2021 What is PSD2 Compliance and What Does it Mean for Your Business? The PSD2 regulation for the EU encourages financial innovation while also mandating better safeguards for consumers. Read about PSD2 compliance and what it means for your business. David Harrington 5 m
  381. Data Security Jul 26, 2021 Last Week in Ransomware: Week of July 26th This week REvil Ransomware had a universal decryption key appear out of thin air and the US has accused China of ProxyLogon. Michael Raymond 1 min read
  382. Data Security Jul 20, 2021 What is a Brute Force Attack? A brute force attack (also known as brute force cracking) is the cyberattack equivalent of trying every key on your key ring, and eventually finding the right one. The most basic brute force attack is a dictionary attack, where the attacker wo
  383. Privacy & Compliance Jul 20, 2021 What is PCI Compliance: Requirements and Penalties PCI compliance provides businesses with guidance on protecting customer credit card information and cut down on credit card fraud. Read on to find out how to protect your company from fines and breaches. Michael Buc
  384. Data Security Jul 19, 2021 Last Week in Ransomware: Week of July 19th This past week hasn't seen quite as much activity as others, likely due to the new ransomware task force created in the US and the mysterious disappearance of REvil and other gangs. Michael Raymond 2 min read
  385. Data Security Jul 19, 2021 Data Migration Guide: Strategy Success & Best Practices Wondering what you need to know about data migration? Our guide to success will provide you with all the information you're looking for! Michael Buckbee 7 min read
  386. Cloud Security Jul 07, 2021 How to Set Up AWS IAM: Elements, Features, & Components Amazon Web Services (AWS) Identity and Access Management (IAM) is a web service that helps you securely control access to AWS. In this article, we will learn to plan, setup IAM to control who is authenticated (signed
  387. Jul 06, 2021 REvil Ransomware Attack on Kaseya VSA: What You Need to Know A malicious hotfix was released by Kaseya VSA servers resulting in the compromise and encryption of thousands of nodes at hundreds of businesses by REvil. Dvir Sason 6 min read
  388. Data Security Jul 06, 2021 What is Data Security? Everything You Need to Know Protect your most valuable asset: your data. Learn what data security is, including key components, technologies and best practices. Nolan Necoechea 7 min read
  389. Active Directory Jun 30, 2021 Understanding Azure DevOps and Building CI/CD Pipeline Are you interested in learning about the tool that helps to automate and manage the complete software development lifecycle? Well, Azure DevOps is the answer for you, but before we… Neeraj Kumar 8 min read
  390. Active Directory Jun 28, 2021 Exploring ARM Templates: Azure Resource Manager Tutorial Are you tired of clicking around the Azure portal creating virtual machines, storage accounts, and app services? Do you need a reliable method of creating the same environment multiple times?… Jeff Brown 11 min re
  391. Data Security Jun 28, 2021 ReConnect - Meet DatAdvantage Cloud Varonis introduced an exciting new cloud-hosted solution that brings our data-centric security approach to AWS, Box, GitHub, Google Drive, Jira, Okta, Salesforce, Slack, and Zoom! Kilian Englert 1 min read
  392. Data Security Jun 28, 2021 Last Week in Ransomware: Week of June 28th Ransomware in the News If you’re a small or medium business using locally hosted cloud storage drives by a popular brand you need to disconnect them from the internet immediately.... Michael Raymond 2 min read
  393. Data Security Jun 25, 2021 SIEM Tools: 9 Tips for a Successful Deployment Security Information and Event Management (SIEM) tools are an essential part of a modern enterprise’s information security program, but careful planning and implementation are required in order to get the… Robert Grimmick 7 mi
  394. Data Security Jun 21, 2021 Azure Bicep: Getting Started and How-To Guide Learn more about Azure Bicep, Microsoft’s new infrastructure as a code language for deploying Azure resources. Contact Varonis today for more information. Jeff Brown 10 min read
  395. Data Security Jun 17, 2021 Network Flow Monitoring Explained: NetFlow vs sFlow vs IPFIX Modern networking equipment is capable of processing billions of packets every second, but most of that work happens behind the scenes. Network Flow Monitoring, also known as packet sampling, aims… Robert Grimmic
  396. Active Directory Data Security Jun 14, 2021 How to Create an Azure Virtual Network Azure Virtual Networks are the core of any Azure deployment. Learn the basics of Azure Virtual Networks and how to create one using three different methods. Jeff Brown 7 min read
  397. Data Security Jun 11, 2021 Azure Automation using PowerShell Runbooks Ever wanted to automate the process of creation of virtual machines in Azure based on the service now request or request from any other digital workflows that the enterprise uses?... Neeraj Kumar 12 min read
  398. Federal Jun 09, 2021 Government Community Cloud: Primer on GCC High, GCC and DOD Internal federal teams -- as well as external contractors -- need to secure sensitive data in the cloud. Enter the Government Community Cloud (GCC). David Harrington 7 min read
  399. Data Security Jun 07, 2021 Cybersecurity Threats Resource Center Learn the cybersecurity threats facing your organization today and find out what tools, processes, and systems can help protect you from them. Josue Ledesma 6 min read
  400. Data Security Jun 02, 2021 Process Hacker: Advanced Task Manager Overview This article is an overview of the tool Process Hacker. This is a popular tool amongst security professionals when analyzing malware as it will display real-time activity of processes and provide a wealth of technical informat
  401. Data Security May 25, 2021 What is Privileged Access Management (PAM) and Why It’s Important to Your Organization Learn why privileged access management is a necessary component of your cybersecurity strategy that keeps your assets protected. Josue Ledesma 4 min read
  402. Data Security May 24, 2021 April 2021 Malware Trends Report This report is a monthly round-up from the Varonis Forensics Team documenting activity observed while responding to incidents, performing forensics, and reverse engineering malware samples. This report is intended to… Ben Zion Lavi 5 min re
  403. Data Security May 21, 2021 How to Analyze Malware with x64dbg This is the fourth and final article in a series of blog posts that serve as an x64dbg tutorial. In this article, we will be taking all the knowledge we… Neil Fox 6 min read
  404. PowerShell May 17, 2021 Git Branching and Merging: A Step-By-Step Guide Learn Git branching and merging best practices: create feature branches, manage code changes, and safely merge updates back into your main codebase. Jeff Brown 8 min read
  405. Data Security May 17, 2021 Meet DatAdvantage Cloud: Data-Centric Security for SaaS & IaaS Today we’re happy to announce early access to DatAdvantage Cloud. Our new cloud-hosted solution brings Varonis’ data-centric security approach to AWS, Box, GitHub, Google Drive, Jira, Okta, Salesforce, Slack, a
  406. Data Security May 17, 2021 YARA Rules Guide: Learning this Malware Research Tool YARA rules are used to classify and identify malware samples by creating descriptions of malware families based on textual or binary patterns. Neil Fox 7 min read
  407. Data Security May 11, 2021 How to Use Azure Sentinel for Security Analytics and Threat Intelligence Data is the key, and security is the topmost concern for every organization. It is nearly impossible to properly analyze and resolve high volumes of security alerts generated by the… Neeraj Kumar 9 mi
  408. Data Security May 07, 2021 What is an SMB Port + Ports 445 and 139 Explained An SMB port is a network port commonly used for file sharing. IBM programmer Barry Feigenbaum developed the Server Message Blocks (SMB) protocol in the 1980s for IBM DOS. SMB continues to be the de facto standard network fi
  409. Data Security Apr 27, 2021 5 Data Governance Reports for Data Owners This blog will cover five Varonis reports that you can automatically generate for data owners to promote strong data governance practices. We will show you how to create, customize, schedule,... Michael Buckbee 3 min read
  410. Data Security Apr 27, 2021 ARP Poisoning: What it is & How to Prevent ARP Spoofing Attacks ARP Poisoning is a type of cyberattack that abuses weaknesses in the widely used Address Resolution Protocol (ARP) to disrupt, redirect, or spy on network traffic. In this piece, we’ll… Robert Grimmick 8 min r
  411. Data Security Apr 26, 2021 What is C2? Command and Control Infrastructure Explained A successful cyberattack is about more than just getting your foot into the door of an unsuspecting organization. To be of any real benefit, the attacker needs to maintain persistence… Robert Grimmick 7 min read
  412. Data Security Apr 23, 2021 Permission Propagation: Info and Tips It's vital to understand permission propagation and its effect on cybersecurity—learn about roles, inheritance, broken folder permissions and more. Brian Vecci 4 min read
  413. Data Security Apr 07, 2021 How Varonis Limits Organization-Wide Exposure If you were hired at a top financial institution as a junior analyst tomorrow, chances are you’d have access to 20% of the company’s data on day one. Data available... Michael Buckbee 6 min read
  414. Data Security Apr 01, 2021 Endpoint Detection and Response: All You Need to Know About EDR Security This guide covers Endpoint Detection and Response, a type of solution to detect and respond to suspicious activity on desktops, laptops, and mobile devices. Robert Grimmick 6 min read
  415. Data Security Apr 01, 2021 How to Create and Manage the Azure Network Watcher Resource The Azure Network Watcher comes with great diagnostic and monitoring tools. Learn more about how to create a Network Watcher and manage its components. Jeff Brown 6 min read
  416. Data Security Apr 01, 2021 March 2021 Malware Trends Report This is a monthly report from the Varonis Forensics Team documenting activity observed while responding to incidents, performing forensics, and reverse engineering malware samples. Ben Zion Lavi 6 min read
  417. Active Directory Data Security Mar 25, 2021 How to Use Azure Private Endpoints to Restrict Public Access to WebApps Learn how to use Private Endpoints to assign a private IP address to an Azure PaaS service and bring the service within your own virtual network. Azure Private Endpoints enables secure
  418. Data Security Mar 25, 2021 What is Data Integrity and How Can You Maintain it? Interested in learning more about data integrity? Get the overview complete with information on why it's important and how to maintain it! Learn more here. Michael Buckbee 4 min read
  419. Data Security Mar 25, 2021 What is Data Classification? Guidelines and Process Data classification is the process of analyzing data and organizing it into categories. Learn how to mitigate and manage governance policies with Varonis. Meagan Huebner 4 min read
  420. Data Security Mar 25, 2021 How to Use Netcat Commands: Examples and Cheat Sheets Learn what the Netcat utility program is and the different types of commands it can support to help IT organizations manage their networks in a better way. Michael Buckbee 7 min read
  421. Data Security Mar 24, 2021 Addressing New Federal IT Work From Home Risks This federal IT working from home guide will cover the risks involved and potential solutions. David Harrington 5 min read
  422. Data Security Mar 23, 2021 Stack Memory: An Overview (Part 3) An overview of stack memory, it’s architecture, and how it can be used to reverse-engineer malware using x64dbg. Neil Fox 9 min read
  423. Data Security PowerShell Mar 22, 2021 How to Use Autoruns to Detect and Remove Malware on Windows This article acts as a tutorial on how to use Sysinternals Autoruns to detect potentially unwanted software that is installed and running automatically on your device. Neil Fox 6 min read
  424. PowerShell Mar 19, 2021 PowerShell Variable Scope Guide: Using Scope in Scripts and Modules PowerShell variable scopes can cause confusion in writing scripts and functions. This post will cover PowerShell scopes in relation to scripts and modules. Jeff Brown 5 min read
  425. Threat Research Mar 18, 2021 Return of the Darkside: Analysis of a Large-Scale Data Theft Campaign Our team has recently led several high-profile investigations of attacks attributed to an up-and-coming cybercrime group, Darkside ransomware Snir Ben Shimol 7 min read
  426. Data Security Mar 18, 2021 How APTs Use Reverse Proxies to Nmap Internal Networks This Nmap reverse proxies guide will cover proxychains, mitigation, and detection. Tokyoneon 4 min read
  427. Data Security Threat Research Mar 17, 2021 How to Unpack Malware with x64dbg This article is an x64dbg tutorial in which reverse engineering malware methodology will be explained and demonstrated. Neil Fox 11 min read
  428. Data Security Mar 10, 2021 Detecting Honeypot Access With Varonis Honeypots are traps that the Blue Team (defenders) plant to catch potentially bad actors trying to exploit a vulnerability, snoop for data, or escalate privileges. Since a honeypot is a decoy,... Michael Buckbee 3 min read
  429. Data Security PowerShell Mar 08, 2021 How to Merge in Git: Remote and Local Git Repositories Tutorial Follow this PowerShell Git tutorial on how to merge in Git, meaning how to take a local repository and merge it into a remote repository. Jeff Brown 6 min read
  430. Data Security Mar 02, 2021 Attack lab: Spear Phishing with Google Drive Sharing Follow along as we show you how scammers are spear phishing with Google Drive sharing to avoid traditonal SPAM filters in Gmail that catch their scams Nathan Coppinger 4 min read
  431. Data Security PowerShell Feb 22, 2021 Watch: ReConnect - Version 8.5 and Combating Insider Risks in Microsoft 365 Kilian and Brian walk through the TL;DR version of our Varonis 8.5 and combatting insider risks in Microsoft 365 event. They cover the high-level points, and answer the best questions du
  432. Active Directory Data Security Feb 19, 2021 Group Policy Editor Guide: Access Options and How to Use Group Policy Editor (gpedit) is an important part of the Active Directory system administrator’s toolkit. Read this blog for more details about gpedit. Michael Buckbee 4 min read
  433. PowerShell Feb 19, 2021 How to Revert a Commit in Git (PowerShell Git Tutorial) This PowerShell tutorial shows how revert to a previous Git commit in a local repository — Git can be used locally without a remote repository. Jeff Brown 4 min read
  434. Privacy & Compliance Jan 29, 2021 What is the Risk Management Framework (RMF)? The Risk Management Framework (RMF) outlines how U.S. government IT systems must be secured, monitored, and governed to reduce cyber risk. Michael Buckbee 6 min read
  435. Data Security Jan 29, 2021 What is DNS, How it Works + Vulnerabilities What is DNS? It’s the address book of the internet. Read on to understand DNS, learn how you are vulnerable to attack through DNS, and how to protect your networks from DNS attacks. Michael Buckbee 9 min read
  436. Active Directory Data Security PowerShell Jan 29, 2021 Windows Management Instrumentation (WMI) Guide: Understanding WMI Attacks WMI is a subsystem of PowerShell that can be used to monitor remote systems and users. In this guide, we’ll explain what WMI is, and how to use it. Michael Buckbee 13 min
  437. Data Security Jan 29, 2021 What Is Cryptojacking? Prevention and Detection Tips Learn how cryptocurrency, cryptomining and cryptojacking work — also included are tips to prevent and detect cryptojacking before it's too late Rob Sobers 8 min read
  438. Data Security Jan 28, 2021 IPv6 Security Guide: Do you Have a Blindspot? Consider this your ultimate IPv6 security guide, complete with comparisons to IPv4, misconceptions managed, and best practices. Robert Grimmick 7 min read
  439. Data Security PowerShell Jan 27, 2021 Top 11 Malware Analysis Tools and Their Features Explore 11 powerful malware analysis tools including traditional and AI-powered options that help security teams detect, dissect, and understand modern threats. Neil Fox 8 min read
  440. Data Security Jan 27, 2021 Watch: Varonis ReConnect! Empowering Data Owners to Keep Risk Low How do you get the right people access to the data they need faster, and still free up IT to focus on other mission-critical work? Kilian and David walk through... Kilian Englert 1 min read
  441. Data Security Jan 27, 2021 What is x64dbg + How to Use It Learn more about x64dbg as a malware analysis tool with our full-length guide and tutorial. Contact us for free trials and tutorials in malware protection. Neil Fox 5 min read
  442. Data Security Jan 27, 2021 How Hackers Spoof DNS Requests With DNS Cache Poisoning An overview of what DNS spoofing and DNS cache poisoning really are and how to protect your organization against them, plus FAQs answers. Michael Raymond 9 min read
  443. Data Security Jan 19, 2021 Varonis Version 8.5: New Features to Combat Insider Risk in Microsoft 365 Varonis version 8.5 is here. Discover organization-wide exposure and learn how to combat insider risk in Microsoft 365 with this new update. Nathan Coppinger 4 min read
  444. Data Security Jan 15, 2021 Exfiltrate NTLM Hashes with PowerShell Profiles Learn how to exfiltrate NTLM hashes using PowerShell, Mimikatz, Hashcat and other techniques through real code examples, gif walkthroughs and screenshots. Tokyoneon 10 min read
  445. Data Security Jan 05, 2021 What Is Network Segmentation? Network segmentation is the act of dividing a computer network into smaller physical or logical components in order to increase security and protect data. Robert Grimmick 4 min read
  446. Data Security Dec 23, 2020 Phishing Attacks: Types, Prevention, and Examples Phishing attacks use fraud to trick users into revealing information or opening malware. They are a popular attack technique among many types of threat actors. Robert Grimmick 9 min read
  447. Threat Research Dec 18, 2020 SolarWinds SUNBURST Backdoor: Inside the Stealthy APT Campaign Learn how detect and defend against the SolarWinds Sunburst malware that has compromised versions of SolarWinds’ Orion solution Snir Ben Shimol 7 min read
  448. PowerShell Dec 03, 2020 How to Connect to Office 365 PowerShell: Azure AD Modules Connecting PowerShell to Office 365 makes management easier, more productive, and can unlock hidden features. In this guide, we’ll show you how. Jeff Brown 7 min read
  449. Data Security Nov 23, 2020 What is a Port Scanner and How Does it Work? Port scanners are essential tools for both red teamers and blue teamers. Learn more about how they work in this blog. Michael Buckbee 7 min read
  450. Data Security Nov 23, 2020 What is Role-Based Access Control (RBAC)? Role-based access control is a framework for granting end users access to systems, applications, and data based on their designated roles in IaaS environments. Daniel Miller 4 min read
  451. Data Security Nov 17, 2020 Netwalker Ransomware Guide: Everything You Need to Know Ransomware has been on the rise. The Netwalker ransomware has begun a widespread attack campaign, and everyone should know how to defend themselves Nathan Coppinger 7 min read
  452. Data Security Nov 16, 2020 The 2021 Financial Data Risk Report Reveals Every Employee Can Access Nearly 11 Million Files Financial services organizations must safeguard tons of highly sensitive information, but data is often left exposed to far too many people. If just one employee clicks on a phish
  453. Data Security Nov 13, 2020 Finding Data Owners with Varonis Figuring out who should have access to folders is complicated. Varonis has a tested methodology that helps organizations get to the least privileged permissions. Michael Buckbee 4 min read
  454. Data Security Nov 11, 2020 What is an Incident Response Plan and How to Create One We'll cover what an incident response plan is, why you need one, how to create one, who executes it and the six steps to create your own plan. Neil Fox 10 min read
  455. Oct 26, 2020 Polyrize Acquisition I’m excited to announce today our agreement to acquire Polyrize, a software company whose team and products are a natural fit as part of the Varonis family. This is the first company Varonis has acquired, and I want to give you some background on the strategic ratio
  456. Data Security Oct 23, 2020 Watch: Varonis ReConnect! Office 365 and Teams make sharing information and collaborating with distant colleagues a breeze. But if you’re not careful, you’ll open yourself up to considerable risk. That’s because securing your... Rachel Hunt 1 min read
  457. Data Security Oct 19, 2020 What is DNS Tunneling? A Detection Guide Domain Name System (DNS) tunneling is a prevalent hacking method — learn how it works, the types of threats and how to detect and combat them Michael Buckbee 4 min read
  458. Data Security PowerShell Sep 28, 2020 How Varonis Helps Stop Emotet Our incident response team is tracking an unprecedented number of Emotet malware infections. This post will cover indicators of compromise, mitigations, and how Varonis can help you detect and stop Emotet at each phase of an attack.
  459. Data Security Sep 28, 2020 Data Privacy Guide: Definitions, Explanations and Legislation Data privacy is all about keeping your data safe and private. In this guide you’ll learn why it’s important, and the best methods to achieve it. Michael Buckbee 13 min read
  460. Threat Research Sep 25, 2020 Exploiting BGInfo to Infiltrate a Corporate Network This post details how a clever attacker can embed a path to a malicious script within a BGInfo config file (.bgi), bypass email security, and execute code remotely. Dolev Taler 3 min read
  461. Data Security Sep 24, 2020 Data Migration Strategy Guide: Best Practices for Success and Security Learn best practices for your cloud migration strategy and get a step-by-step plan for a secure and effective process. Rob Sobers 7 min read
  462. Active Directory Sep 21, 2020 How to Use John the Ripper: Tips and Tutorials John the Ripper is a password-cracking tool that you should know about. Read on to learn more about this standard pentesting and hacking program. Michael Buckbee 3 min read
  463. Data Security Sep 08, 2020 Government Hacking Exploits, Examples and Prevention Tips In this guide, we’ll explore how governments launch attacks, the different government hacking exploits and how you can defend yourself. Rob Sobers 10 min read
  464. Data Security Sep 02, 2020 We Know About Your Company's Data: OSINT Lessons for C-Levels I’ve been on a mission the last few months to bring basic knowledge about data security to the upper reaches of the organization. Our C-level readers and other executives, who... Michael Buckbee 6 min read
  465. Active Directory Aug 21, 2020 What is Azure Active Directory? A Complete Overview Azure Active Directory is a new way to manage users in the cloud. Read on to learn some details and some how-tos as you migrate to Azure AD. Michael Buckbee 8 min read
  466. Data Security Aug 20, 2020 Using Malicious Azure Apps to Infiltrate a Microsoft 365 Tenant Phishing remains one of the most successful ways to infiltrate an organization. We’ve seen a massive amount of malware infections stemming from users opening infected attachments or clicking links that... Eric
  467. Privacy & Compliance Aug 17, 2020 California Privacy Rights Act (CPRA): Your Up-To-Date Guide to CCPA 2.0 The California Privacy Rights Act (CPRA), an extension of the CCPA, is expected to pass in Nov 2020 — we’ll explain what the CPRA means for your business. David Harrington 6 min read
  468. Data Security Aug 12, 2020 Varonis eBook: WMI Events and Insider Surveillance If you’ve been reading our blog, you know that Windows software can be weaponized to allow hackers to live-off-the-land and stealthily steal sensitive data. Insiders are also aware of the... Michael Buckbee 1 min read
  469. Threat Research Aug 12, 2020 A Queen’s Ransom: Varonis Uncovers Fast-Spreading “SaveTheQueen” Ransomware A new strain of ransomware encrypts files and appends them with the extension, “.SaveTheQueen,” and propagates using the SYSVOL share on Active Directory Domain Controllers. Our customers encount
  470. Data Security Aug 12, 2020 The No Hassle Guide to Event Query Language (EQL) for Threat Hunting Did you ever have the urge to put together a few PowerShell scripts to parse and analyze the Sysmon event log in order to create your own threat analysis software?... Michael Buckbee 11 min read
  471. Data Security Aug 10, 2020 What is a Man-in-the-Middle Attack: Detection and Prevention Tips Man-in-the-middle attacks are sophisticated spying techniques attackers use to snoop on network traffic. Read on to learn more about these MitM attacks. Michael Buckbee 7 min read
  472. Active Directory Jul 28, 2020 Active Directory Resource Center Active Directory is the basis of many enterprise networks. Learn some of the basics about AD in this guide. Michael Buckbee 8 min read
  473. Data Security Jul 28, 2020 DNS Security Guide DNS security should be considered an essential part of any business's security plan. Our goal in this piece is to help provide information to best inform you of all options around securing your DNS. Michael Buckbee 5 min read
  474. Active Directory Data Security Jul 14, 2020 Active Directory Account Lockout: Tools and Diagnosis Guide AD Account Lockouts are perhaps the biggest source of frustration for IT admins. In this guide, we’ll explain how they happen, and how to prevent them. Michael Buckbee 6 min read
  475. Jun 24, 2020 Getting the Most Out of Data Transport Engine If you don’t need it, get rid of it. If it’s sensitive, make sure sure it’s in the right place, and only accessible to those who need it. Old files... Brian Vecci 3 min read
  476. Data Security Jun 23, 2020 Malware Protection: Basics and Best Practices Our malware protection guide covers malicious software, utilizing the outlined controls and best practices to achieve a higher level of security. Michael Buckbee 12 min read
  477. Data Security Jun 23, 2020 What is a Domain Controller, When is it Needed + Set Up Domain controllers are common targets of attackers. Learn how to protect and secure your domain controllers to prevent data breaches. Michael Buckbee 2 min read
  478. Data Security Jun 19, 2020 Working With Windows Local Administrator Accounts, Part II Before we delve into Restricted Groups, I thought it might be worthwhile to take a closer look at how hackers take advantage of Administrator passwords. For Pass-the-Hash fans, this post... Michael Buckbee 4 min re
  479. Data Security Jun 19, 2020 Finding EU Personal Data With Regular Expressions (Regexes) If there is one very important but under-appreciated point to make about complying with tough data security regulations such as the General Data Protection Regulation (GDPR), it’s the importance of finding... Mich
  480. Varonis Products Jun 19, 2020 Introducing Our New DataPrivilege API and a Preview of Our Upcoming GDPR Patterns GDPR Patterns Preview We’re less than a year out from EU General Data Protection Regulation (GDPR) becoming law, and hearing that our customers are facing more pressure than ever to... Mic
  481. Data Security PowerShell Jun 19, 2020 How To Get Started with PowerShell and Active Directory Scripting This article is a text version of a lesson from our PowerShell and Active Directory Essentials video course (use code ‘blog’ for free access). The course has proven to be... Michael Buckbee 5 min
  482. Data Security Jun 19, 2020 Detecting Malware Payloads in Office Document Metadata Ever consider document properties like “Company,” “Title,” and “Comments” a vehicle for a malicious payload? Checkout this nifty PowerShell payload in the company metadata: #powershell payload stored in office metadata
  483. Data Security Jun 19, 2020 Working With Windows Local Administrator Accounts, Part I In writing about hackers and their techniques, the issue of Windows local Administrator accounts often comes up. Prior to Windows 7, the Administrator account was created by default with no... Michael Buckbee 3 min
  484. Data Security Jun 19, 2020 Defining Deviancy With User Behavior Analytics For over the last 10 years, security operations centers and analysts have been trading indicators of compromise (IoC), signatures or threshold-based signs of intrusion or attempted intrusion, to try to... Matt Radolec 4 min re
  485. Data Security PowerShell Jun 19, 2020 PowerShell Obfuscation: Stealth Through Confusion, Part I To get into the spirit of this post, you should probably skim through the first few slides of this presentation by Daniel Bohannon and Le Holmes given at Black Hat... Michael Buckbee 3 min read
  486. Data Security PowerShell Jun 19, 2020 How to use PowerShell Objects and Data Piping This article is a text version of a lesson from our PowerShell and Active Directory Essentials video course (use code ‘blog’ for free access). The course has proven to be... Michael Buckbee 5 min read
  487. Privacy & Compliance Jun 19, 2020 GDPR Data Breach Guidelines Index Personal Data Breach vs. Reportable Breach Notifying the Regulators Breach Notification and Ransomware Individual Reporting Breach Notification in Phases Notification Details This Is Not Legal Advice The General Data... Michael Buck
  488. Privacy & Compliance Jun 19, 2020 A Few Thoughts on Data Security Standards Did you know that the 462-page NIST 800-53 data security standard has 206 controls with over 400 sub-controls1? By the way, you can gaze upon the convenient XML-formatted version here.... Michael Buckbee 3 min read
  489. Data Security Jun 19, 2020 More NSA Goodness: Shadow Brokers Release UNITEDRAKE Looking for some good data security news after the devastating Equifax breach? You won’t find it in this post, although this proposed federal breach notification law could count as a... Michael Buckbee 2 min read
  490. Privacy & Compliance Jun 19, 2020 Do Your GDPR Homework and Lower Your Chance of Fines Advice that was helpful during your school days is also relevant when it comes to complying with the General Data Protection Regulation (GDPR): do your homework because it counts for... Michael Buckbee 3 min read
  491. Data Security Jun 19, 2020 DNSMessenger: 2017's Most Beloved Remote Access Trojan (RAT) I’ve written a lot about Remote Access Trojans (RATs) over the last few years. So I didn’t think there was that much innovation in this classic hacker software utility. RATs, of... Michael Buckbee 2 min read
  492. Data Security Jun 17, 2020 How to Protect GDPR Data with Varonis In the overall data security paradigm, GDPR data isn’t necessarily more important than other sensitive data, but demands specific monitoring, policy, and processing – with significant fines to encourage compliance.... Michael Buckbee 3
  493. Data Security Jun 17, 2020 Adventures in Fileless Malware, Part II: Sneaky VBA Scripts I’m a fan of the Hybrid Analysis site. It’s kind of a malware zoo where you can safely observe dangerous specimens captured in the wild without getting mauled. The HA... Michael Buckbee 5 min read
  494. Data Security Privacy & Compliance Jun 17, 2020 Wyden’s Consumer Data Protection Act: Preview of US Privacy Law The General Data Protection Regulation (GDPR) has, for good reason, received enormous coverage in the business and tech press in 2018. But wait, there’s another seismic privacy shift occur
  495. Data Security Jun 17, 2020 MITRE ATT&CK Framework: Everything You Need to Know The MITRE ATT&CK matrices are an invaluable resource for cybersecurity pros. Read on to learn more about ATT&CK tactics and techniques. Meagan Huebner 4 min read
  496. Data Security Jun 17, 2020 Introducing Varonis Data Security Platform 6.4.100: Varonis Edge, GDPR Threat Models, Geolocation and More It’s the beginning of a new year, and we have a huge new beta release to share with you. The beta release of the Varonis Data Security Platform 6.4.100 dropped... Mic
  497. Data Security Jun 17, 2020 How To Prevent Ransomware: The Basics Ransomware is a destructive type of malware that has taken down city governments and cost organization millions. Learn more about how to prevent ransomware Michael Buckbee 12 min read
  498. Active Directory Data Security Jun 17, 2020 7 Key Risk Indicators in the Varonis Active Directory Dashboard All an attacker needs is time and motivation to infiltrate your network. It’s your job to make their efforts to break in and remain undetected as difficult as possible. First,... Michael Buckb
  499. Data Security Jun 17, 2020 What is OSINT? Open source intelligence is often utilized by hackers and red teams to leverage public data while conducting investigations, often using database searches. Kody Kinzie 8 min read
  500. Privacy & Compliance Jun 17, 2020 North Carolina Proposes Tougher Breach Notification Rules If you’ve been reading our amazing blog content and whitepaper on breach notification laws in the US and worldwide, you know there’s often a hidden loophole in the legalese. The... Michael Buckbee 3 min read
  501. Data Security Jun 17, 2020 What is a Rootkit? How Can You Detect it? Think there might be a chance you caught a rootkit virus? Learn more about these toolboxes of the malware world and just how to detect them with our guide. Michael Buckbee 3 min read
  502. Data Security Jun 17, 2020 Is Your Biggest Security Threat Already Inside Your Organization? Is your company protected against insider threats? From malicious ex-employees to negligent staff, your biggest cybersecurity concern may already be inside. Rob Sobers 1 min read
  503. Data Security Jun 17, 2020 Ransomware Meets Its Match With Automated Cyber Defenses The “good news” about hacking is that while leaving you with potentially enormous incident response costs — customer notifications, legal fees, credit monitoring, class-action suits — your business can still... Micha
  504. Data Security Jun 17, 2020 Insider Threats: Stealthy Password Hacking With Smbexec As we’ve been writing about forever, hackers are relying more on malware-free techniques to fly below the radar. They’re using standard Windows software to live off the land, thereby getting... Michael Buckbee 6 min r
  505. Data Security Jun 17, 2020 Varonis DataPrivilege and RSA® Identity Governance and Lifecycle We’re thrilled to announce interoperability between Varonis DataPrivilege and RSA® Identity Governance and Lifecycle, with a new Implementation Blueprint. This Implementation Blueprint will help the business
  506. Active Directory Data Security Jun 17, 2020 Should You Follow Microsoft’s Guidance to Stop Expiring Passwords? Microsoft changed their guidance on permissions expiration policies. Should you change yours? Michael Buckbee 3 min read
  507. Privacy & Compliance Jun 17, 2020 Understanding the Relationship Between the GDPR and ePrivacy Directive Remember last May when our favorite sites were suddenly asking our consent to collect cookie information? The answer given by the media and other experts for this flurry of cookie... Michael Buck
  508. Data Security Jun 17, 2020 How to Use Microsoft Teams Safely: Security and Compliance Basics Microsoft Teams is the Office 365 chat portal. While it enhances productivity, it also introduces some risk — read on to learn how to reduce these risks Michael Buckbee 6 min read
  509. Data Security Privacy & Compliance Jun 17, 2020 Right to be Forgotten: Explained Learn about The Right to be Forgotten (RTBF), an individual’s right to request their data be removed from any organization's data stores. Michael Buckbee 5 min read
  510. Data Security Jun 17, 2020 Adventures in Fileless Malware, Part V: More DDE and COM Scriplets In this series of post, we’ve been exploring attack techniques that involve minimal efforts on the part of hackers. With the lazy code-free approach I introduced last time, it’s even possible to... Michael
  511. Data Security Jun 17, 2020 Adventures in Fileless Malware, Part I When I first started looking into the topic of hackers living off the land by using available tools and software on the victim’s computer, little did I suspect that it would... Michael Buckbee 4 min read
  512. Data Security Privacy & Compliance Jun 17, 2020 How to Discover GDPR Data With Varonis GDPR goes into effect in less than 85 days – but there’s still time to prepare. The first step in getting ready for the upcoming deadline is to discover and... Michael Buckbee 2 min read
  513. Data Security Jun 17, 2020 What is Identity Access Management? Identity and access management is establishing and managing the roles and access privileges of individual network users. Daniel Miller 6 min read
  514. Data Security Jun 17, 2020 Is Your Company Prepared for a Cyber Attack? Would your company survive a cyber attack? Use our flowchart to see if your business is prepared for cybersecurity threats. Rob Sobers 1 min read
  515. Active Directory Jun 17, 2020 Active Directory Has a Privacy Problem Attackers can manipulate Active Directory into giving up potentially sensitive data about users on your network. Michael Buckbee 3 min read
  516. Privacy & Compliance Jun 17, 2020 Frequently Asked Questions (FAQ): GDPR and HR/Employee Data As I wrote in another post, HR records are considered personal data and covered under the General Data Protection Regulation (GDPR). Since I keep on hearing from people who should... Michael Buckbee 6 min r
  517. Data Security Jun 17, 2020 Koadic: LoL Malware Meets Python-Based Command and Control (C2) Server, Part I In my epic series on Windows binaries that have dual uses– talkin’ to you rundll32 and mshta — I showed how hackers can stealthy download and launch remote script-based malware.... Michael Buckb
  518. Data Security Jun 17, 2020 Endpoint Detection and Response (EDR): Everything You Need to Know Endpoints are a favorite target of attackers – they’re everywhere, prone to security vulnerabilities, and difficult to defend. Our guide to EDR will take you through the basics, the importance and the 9 ele
  519. Privacy & Compliance Jun 17, 2020 A Year in the Life of the GDPR: Must-Know Stats and Takeaways This review of the GDPR covers how it's changed the way industries and individuals function online through GDPR stats, fines and policies of this past year Rob Sobers 10 min read
  520. Data Security Jun 17, 2020 The Difference Between Data Governance and IT Governance Lately, we’ve been so focused on data governance, extracting the most value from our data and preventing the next big breach, many of us have overlooked IT governance fundamentals, which... Michael Buckbee 3 min read
  521. Data Security Jun 17, 2020 Adventures in Fileless Malware, Part III: Obfuscated VBA Scripts for Fun and Profit After yakking in the last two posts about malware-free or fileless attack techniques, we’re ready to handle a dangerous specimen. The Hybrid Analysis site is the resource I rely on to... Mi
  522. Data Security Jun 17, 2020 Data Breach Response Times: Trends and Tips We've taken a deep dive to discover the trends between different data breaches, their response times, the effect of response duration and what you can do to keep your response time down. Rob Sobers 10 min read
  523. Active Directory Data Security Jun 17, 2020 What is an Active Directory Forest? An Active Directory forest is the top most logical container in an Active Directory configuration that contains domains, users, computers, and group policies. Michael Buckbee 4 min read
  524. Data Security Jun 17, 2020 Windows Defender Turned Off by Group Policy [Solved] Windows Defender is a common AV solution, and attackers know how to work-around it. Learn how to turn Defender back on with this easy tutorial. Michael Buckbee 2 min read
  525. Data Security Jun 17, 2020 PowerShell for Pentesters: Scripts, Examples and Tips This PowerShell for Pentesters' guide covers running commands, coding, tutorials and examples as well as the benefits of pentesting with PowerShell. Michael Buckbee 5 min read
  526. Data Security Jun 17, 2020 Add Varonis to IAM for Better Access Governance Managing permissions is a colossal job fraught with peril, and over-permissive folders are the bane of InfoSec and a hacker’s delight. Many organizations employ IAM (Identity Access Management) to help... Michael Buckbee 2 mi
  527. Data Security Jun 17, 2020 What is CASB? All About Cloud Access Security Brokers Cloud Access Security Brokers (CASBs) are a great cybersecurity tool. Read on to learn about CASBs work, the solutions they offer and how to choose one. Michael Buckbee 4 min read
  528. Data Security Jun 17, 2020 Cerber Ransomware: What You Need to Know Cerber ransomware is a ransomware-as-a-service (RaaS) application that attacks your files by encrypting your important documents and database files. Learn how to protect your files from and keep your data safe. Michael Buckbee 2 min
  529. Data Security Jun 17, 2020 What is UEBA? Complete Guide to User and Entity Behavior Analytics UEBA extends User Behavior Analytics to cover entities. In this guide, we’ll show you how to use UEBA, and how it can improve your cybersecurity Michael Buckbee 13 min read
  530. Data Security Jun 16, 2020 Sysmon Threat Analysis Guide In my various pentesting experiments, I’ll pretend to be a blue team defender and try to work out the attack. If you have good security eyes, you can search for... Michael Buckbee 19 min read
  531. Data Security Jun 15, 2020 What is SIEM? A Beginner’s Guide Learn about Security Information and Event Management (SIEM), what it is, how it works, and how SIEM solutions can help your business. Michael Buckbee 6 min read
  532. Data Security Jun 15, 2020 What is DNS TTL + Best Practices This article covers the topic of DNS TTL (time to live), best practices all aspects surrounding implementation. Michael Buckbee 9 min read
  533. Data Security Jun 03, 2020 Microsoft Office 365 File Sharing Guide: OneDrive and SharePoint Tips Microsoft Office 365 adds a layer of complexity to your data security strategy — learn how to protect data and improve collaboration in your organization. Michael Buckbee 8 min read
  534. Privacy & Compliance May 29, 2020 Cybersecurity Maturity Model Certification (CMMC): A Contractor's Survival Guide Cybersecurity Maturity Model Certification (CMMC) is a standard for DoD contractors’ cybersecurity. We’ll cover what it is and how to achieve compliance. Justin McErlean 2 min read
  535. Data Security May 20, 2020 Introducing the Varonis Remote Work Update The Varonis Data Security Platform Remote Work Update is here! This update delivers the product enhancements you need right now to keep your data safe in a work-from-home world. In... Michael Buckbee 4 min read
  536. Data Security May 20, 2020 How to Use Nmap: Commands and Tutorial Guide Nmap is a powerful, and fast network mapping tool. In this guide, we’ll explain how to install and use Nmap, and show you how to protect your networks. Michael Buckbee 7 min read
  537. Data Security PowerShell May 14, 2020 Windows PowerShell vs. CMD: What's The Difference? PowerShell is Microsoft’s updated shell that replaced the previous command prompt (CMD). Learn how to take advantage of cmdlets, piping, and third-party extensions. Michael Buckbee 2 min read
  538. Data Security PowerShell May 14, 2020 Windows PowerShell Scripting Tutorial For Beginners New to PowerShell scripting? Explore these scripting tutorials to learn to write and execute basic scripts, PowerShell cmdlets, aliases, pipes and more. Michael Buckbee 11 min read
  539. Data Security May 14, 2020 GDPR Requirements in Plain English You just want to answer the question: “What do I need to do for GDPR?” Maybe you've worked your way through a few online quizzes to test for GDPR readiness or skimmed an article that made some vague suggestions. Learn the GDPR requirement
  540. Data Security May 13, 2020 24 Essential Penetration Testing Tools in 2020 A collection of the top penetration testing tools along with their best uses and supported platforms to help you find the pentesting tool you need. Michael Buckbee 7 min read
  541. Data Security May 05, 2020 The Complete Azure Compliance Guide: HIPAA, PCI, GDPR, CCPA Achieving compliance with HIPAA, PCI, GDPR, and CCPA regulations in your Azure system can be complex. In this guide, we’ll show you how. Michael Buckbee 18 min read
  542. Data Security May 01, 2020 COVID-19 Threat Update #6 Hoarding isn’t just happening with toilet paper: we’re seeing cases where remote employees have downloaded department-level folders. Chances are, these files will contain sensitive data like PII, PCI, HIPAA and... Kilian Englert 1 min read
  543. Privacy & Compliance Apr 30, 2020 Is Microsoft Office 365 HIPAA Compliant? Microsoft Office 365 is growing in popularity, but it can present some challenges to HIPAA compliance. Read on to learn more about Office 365 HIPAA compliance Michael Buckbee 5 min read
  544. Data Security Apr 24, 2020 COVID-19 Threat Update #5 The race to enable remote work sent IT and security teams into high gear — and often resulted in shortcuts that exposed organizations to incredible risk in the process. Hackers... Kilian Englert 1 min read
  545. Data Security Threat Research Apr 22, 2020 Azure Skeleton Key: Exploiting Pass-Through Auth to Steal Credentials We created a proof-of-concept that manipulates the Azure authentication function to give us a ‘skeleton key’ password that will work for all users, and dump all real clear-text usernames
  546. Data Security Apr 15, 2020 Hackers Take Aim at Home WiFi Networks Millions of people are working remotely – and attackers are taking advantage. As more workers log into residential WiFi networks, cybercriminals have plenty of opportunities to launch attacks. Varonis security... Rachel Hunt 1 min rea
  547. Data Security Apr 06, 2020 What is PGP Encryption and How Does It Work? PGP is an encryption method that provides security and privacy for online communications — we’ll look at how PGP encryption works and how you can use it Michael Buckbee 9 min read
  548. Data Security Apr 06, 2020 COVID-19 THREAT UPDATE #4 Millions of remote workers are accessing cloud services and using VPNs to maintain business continuity. But attackers are pivoting to gain the upper hand. Click to watch Matt Radolec and... Kilian Englert 1 min read
  549. Data Security Apr 01, 2020 What is Fileless Malware? PowerShell Exploited Fileless malware uses PowerShell to steal valuable data and inject malicious code into your systems. In this guide, we’ll show you how to protect yourself. Michael Buckbee 8 min read
  550. Data Security Mar 31, 2020 COVID-19 Threat Update #3 If you’re reading this, there’s a good chance you’ve become one of the millions of employees forced to work from home during the coronavirus crises. Accessing your emails and files... Kilian Englert 1 min read
  551. Active Directory Mar 29, 2020 Active Directory Users and Computers (ADUC): Installation and Uses Active Directory Users and Computers (ADUC) is a MMC snap-in you can use to manage Active Directory. Read on for more details, use cases, and caveats. Michael Buckbee 4 min read
  552. Data Security Mar 29, 2020 Windows BlueKeep Vulnerability: Deja Vu Again With RDP Security Weaknesses It’s a familiar data security story: under-patched Windows software, hidden security vulnerabilities, and hackers who know how to exploit them. But if the patch involves Windows Remote Desk Protocol
  553. Data Security Mar 29, 2020 CryptoLocker: Everything You Need to Know CryptoLocker is a type of malware that encrypts files, holding them for ransom. For this reason, CryptoLocker and its variants have come to be known as “ransomware.” Michael Buckbee 5 min read
  554. Privacy & Compliance Mar 29, 2020 How Varonis Helps With ITAR Compliance International Traffic in Arms Regulations (ITAR) mandates that access to physical materials or technical data related to defense and military technologies is restricted to US citizens only. According to the US... Jesse Rosenbau
  555. Data Security Mar 29, 2020 Announcing Varonis Edge – to the Perimeter and Beyond Email, web, and brute force attacks are the primary ways that malware gets through your defenses. The Yahoo hacker’s favorite technique? VPN. The Sony hack? Phishing emails. Remote Access Trojans?... Michael Buckbee 1 m
  556. Data Security Mar 29, 2020 How Varonis Levels Up Your Incident Response Varonis arms your incident response team with expert playbooks on how to respond to common alerts, as well as a free IR service to help you when you need it most. Michael Buckbee 3 min read