Varonis

Secure AI and the data that powers it

[Varonis @varonis]

Every second a security analyst spends validating a login attempt builds a gap that an attacker can use. Varonis Triage Agent closes that gap. 👇

Varonis Triage Agent is trained to operate as an incident responder and amplify MDDR’s ability to respond to threats decisively, helping MDDR analysts work up to twice as fast.

Powered by the context that our Data Security Platform provides, it can go beyond theory and actually investigate things like identities, behavioral patterns, sensitive data exposure, and more.

As attackers use AI more, alerts aren’t slowing down. With a 96% production recall rate, the agent reliably surfaces real threats rather than burying them in noise.

Learn more here:
https://t.co/X9J0OB10Gm

[Varonis @varonis]

Everyone is moving fast on AI. The question is, are your teams moving fast and safe?

Integrating AI has never been easier. The frontier labs are explicit that broad access to data is required for these systems to be effective for virtually every use case, from design to development.

The problem is that traditional security controls mean access come with risk. Security teams aren't able to see, govern, and protect AI at the speed required.

November 9, that changes.

Atlas Week kicks off a new era of AI security where teams no longer have to decide between AI adoption and risk.

Register here: https://t.co/UQZxP04s2M

[Varonis @varonis]

Meet PHP2Shell, the new pair of vulnerabilities affecting roughly 70% of the world's websites. 👇

PHP2Shell is a pair of critical flaws in the core engine, so secure application code can’t protect a vulnerable server. Attackers could read a PHP worker’s memory (passwords, tokens, API keys) and, in some cases, run code on the server.

Patched releases shipped on October 21 for PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. PHP 8.1 and older have no official patched release.

Organizations should inventory every PHP install, patch internet-facing systems first, and rotate credentials, tokens, and API keys on any server that was exposed.

Varonis applied the relevant patches after the release. No customer action is required for any Varonis product.

Read Varonis Threat Labs full breakdown here: https://t.co/vmdrTBTTnI

[Varonis @varonis]

Four months after Operation Endgame, StealC's seller is back.

Dubbed Stadia, this new product is a full RAT with hidden desktop control, a command shell, a file explorer, and a loader. Varonis Threat Labs got the build the day it was listed, reversed it, and ran its panel against a host of our own, discovering that the code inside matches StealC's.

Operation Endgame forced StealC's seller to start from scratch with new servers, names, and panels, but it's clear they're not done yet.

Read more about our findings here: https://t.co/0WOqmpMcLX

[Varonis @varonis]

Enable AI with confidence in your data. 🦾

Varonis is proud to announce our integration with Collibra to bring security and governance context together.

Successful AI initiatives start with data that organizations can find, understand, and use safely. Having that knowledge built directly into the tools you're already using makes it fast, easy, and safe to adopt AI.

With this new integration, Collibra users will have visibility and context into what data is sensitive to make better-informed decisions on data and AI initiatives across their organizations.

Read more about Varonis for Collibra here: https://t.co/HpK7FVzAq4

[Varonis @varonis]

EXCITING NEWS: Varonis is combining with @Proofpoint to create one of the leading pure-play cybersecurity companies in the world.

The future belongs to organizations that can secure people, agents, and data. By uniting two complementary technologies, we can move faster to bring secure, trustworthy AI to organizations around the world.

Learn more: https://t.co/hNUuujdO3K

[Varonis @varonis]

Who do you have in your cybersecurity starting line-up? 🏈

With Varonis, your organization gets the most well-rounded team in the game. There's no one who can defend better, out-score, or intercept more than us. Here's how we do it:

🦾 Next-gen DAM brings next-level defense to databases. With an agentless defense that deploys fast, not a single play goes unchecked. The fields covered endzone to endzone.

🤚 Interceptor keeps threats locked down. With a 99% overall threat interception rate, nothing is getting past. Interceptor even goes beyond what's on the field. Even when it's not actively making plays, it's scanning millions of URLs per day to stop threats before they gain access.

🌎 Atlas makes the big plays that turn the tide against AI. With features like Agent IBAC, AISPM, and pentesting in its back pocket, Atlas understands AI security like no one else. With its direct integration to key players, like Claude Code, Atlas is a playmaker you'll want on game day.

Keeping data safe is a team sport.

Having the right players by your side makes the difference.

[Daniel Kelley @danielmakelley]

Varonis Threat Labs found TrustSink, a technique that turns Microsoft Entra ID logins into a password trap.

A rogue external MFA provider captures passwords on a fake Microsoft page, then lets the login finish. Resetting the password doesn't remove it.

https://t.co/920ICnQ9xg

[Varonis @varonis]

Setting the pace on AI Security.🦾

We're proud to share that Varonis has been named a Pace Setter in the Gartner® Emerging Market Quadrant for AI Application Security.

Organizations are racing to adopt AI, but most are flying blind about which data their AI systems can actually access. This recognition reflects what we've been building toward: giving security teams the visibility and control to adopt AI safely, without slowing anyone down.

Varonis Atlas is the only platform that secures the entire AI security lifecycle. We're empowering organizations to safely adopt AI and letting teams innovate at the speed of AI.

We believe this recognition reflects Varonis Atlas's ability to close that gap and validates the growing demand for security platforms that can discover, govern, and protect data across the full AI lifecycle.

Read more: https://t.co/RIBmu0oDHE

[Varonis @varonis]

A password reset won't get you out of this one.

Meet TrustSink: the technique that turns a rogue external MFA provider into a persistent credential trap inside Microsoft Entra ID.

Privileged attackers could register a lookalike authentication provider and insert a pixel-accurate password page into the legitimate sign-in flow.

The page captures the password in plaintext while a valid signed token completes the login, no errors, no red flags.

A rogue provider remains in the flow and captures the next password, even after you reset it.

Full research, detection steps, and mitigation: https://t.co/9tlOuqpZky

[Varonis @varonis]

30% of your data is ROT: redundant, obsolete, or trivial.

That's not just wasted storage. It's a wider blast radius, slower AI adoption, and data you're legally on the hook for.

Introducing Varonis Data Lifecycle Management, helping you manage data from creation to deletion automatically.

Varonis DLM finds every duplicate, stale file, and expired record across your data estate, helping you:

✔ Cut storage costs
✔ Reduce your blast radius
✔ Automate compliance and retention
✔ Feed AI only the data that deserves to exist

Read more about Varonis DLM here: https://t.co/J3ZhHntN9F

[Varonis @varonis]

Machine identities now outnumber human ones by more than 80 to 1.

That number includes service accounts, API keys, and a growing population of AI agents, each with its own set of permissions, and most with far more access than they actually need.

Here's the problem: identity security programs were built around people. Reviews, access certifications, and offboarding. all designed for a human on the other end of the account.

Agents don't fit that model. They're provisioned quickly, rarely reviewed, and often forgotten the moment a project ends.

The result is a form of exposure that most security teams can't yet see: a sprawling, unmanaged layer of non-human identities sitting atop sensitive data.

This is exactly the gap Varonis Atlas was built to close. Atlas continuously discovers every AI system in your environment, whether it's agents, LLMs, embedded AI, or shadow AI, and evaluates which data each can actually access.

You can't govern what you can't see.

That ratio isn't going to shrink. The question is: does your team know what your 80 are doing right now?

[Varonis @varonis]

Our Snowflake partnership just got an upgrade. ❄️

We're proud to announce that Varonis has achieved Premier Partner status in the @SPN_Partners Network and is now available on the Snowflake Marketplace.

AI agents, copilots, and LLMs now read, write, and act on data in Snowflake at machine speed. Varonis gives security teams visibility into where sensitive data lives, who can access it, and how it's used, so they can move fast with AI without losing control of their data.

We're excited to continue helping Snowflake users safely leverage AI.

Learn more about our partnership here: https://t.co/23ZHU1MiKz

[Varonis @varonis]

Your AI agent isn't malicious. It's just not being watched.

Most agents are given access based on what they could need, not what they actually use. Over time, that gap becomes the blast radius.

Recognizing the signs early can help protect your organization from trouble.

Here are three things to be on the lookout for👇

[HackerNoon | Learn Any Technology @hackernoon]

AI assistants introduce new security considerations for enterprise teams.

This security analysis by @varonis examines how indirect prompt attacks can affect AI-powered workplace tools and what organizations can do to reduce the risk:

[Cloud Security Podcast @CloudSecPod]

Stealing 10 terabytes used to be the attacker's problem too.

Too much data to make sense of AI removed that bottleneck. Old stolen data is being reprocessed for new ways to monetise it.The breach you had two years ago isn't finished.

Simon Biggs @varonis

[Cloud Security Podcast @CloudSecPod]

Not every security problem involving AI is an AI security problem.

Some attacks are new. Others are old attacks moving faster.

We spoke to David Gibson from @varonis about where existing security models still work and where they break with AI agents.

#AISecurity

[Varonis @varonis]

Meet CoSnitch: that vulnerability that CoPilot itself told our threat researchers about.

No clicks. No warnings. No confirmations. And it can plant instructions in your Copilot memory that survive a password reset.

Microsoft has now patched all three, but this is the third flaw of this type our team has found this year, and the pattern keeps repeating.

🔗: https://t.co/Z2a9QnN3vE

[Varonis @varonis]

One click. Zero jailbreak. Full data exposure.

Varonis Threat Labs just released RovoBlast, a vulnerability in Atlassian's AI assistant, in which a single crafted link can seed attacker instructions directly into a user's trusted session.

No prompt surgery. No permission bypass. No warning shown to the user.

This is the same pattern we've now seen across Copilot, Gemini, ChatGPT, and more: Enter → Evade → Escape. Untrusted input becomes a command, guardrails don't catch it, and a built-in feature becomes the exit door.

Atlassian has since resolved this vulnerability.
🔗 Read the research: https://t.co/b97abRBuUN

[Varonis @varonis]

Introducing Agent IBAC, the latest expansion to Varonis Atlas. 🦾

Access control for AI agents isn't yes/no. It's "should THIS agent take THIS action with THIS data?"

Atlas gets the answer and stops it when it's no.

Learn more: https://t.co/6sZQN8kav3