Varonis Blog

Cybersecurity can feel a lot like the ocean. A sense of calm on the surface, but likely something unknown is lurking underwater.

Varonis Threat Labs researchers Doron Ka...

Managed MySQL databases are supposed to make things easier. The cloud provider handles patching, backups, and infrastructure. The customer handles authentication and access control. That division of responsibility works well when both sides do their part. When they don’t, the window between deployment and compromise can be measured in minutes.

Varonis Threat Labs has uncovered a new three-stage vulnerability chain that turns Microsoft 365 Copilot Enterprise Search into a silent data exfiltration weapon.

Dubbed SearchLeak, the chain combines a relatively new class of AI-specific vulnerability known...

Anthropic's whitepaper opens with a statement that frames the past and present of AI and data security: "Perimeter-based cybersecurity defenses can't keep up with modern threa...

Many enterprises are plugging AI agents directly into the inbox. Agents triage email, retrieve internal data, and even respond to emails. The inbox is also the place that’s most exposed and vulnerable to phishing attacks.

Varonis Threat Labs explored whether...