COVID-19 Threat Update #1

Varonis sees the highest number of VPN and O365 events ever recorded across customer base. Click to watch our security experts discuss what they’re seeing on the front lines, and what...
1 min read
Last updated November 18, 2025

Varonis sees the highest number of VPN and O365 events ever recorded across customer base.

Click to watch our security experts discuss what they’re seeing on the front lines, and what folks can do.

Video Thumbnail
2:43

 

What does this mean for security?  

Organizations are scrambling to get newly home-bound employees up and running.  

We’ve got anxious employees working from vulnerable home networks, and many organizations don’t have as much visibility into their remote connections and data as they’ll need. With the expanded attack surface, responding to incidents isn’t getting any easier.  

Corporate laptops are in short supply, so organizations are making do with home systems. That’s like fighting in the dark – older or unpatched operating systems and browsers that may not be compatible with endpoint solutions.  

We’re already seeing malicious COVID-19 links sent via email or social that lead to ransomware or browser-only attacks that threaten 365 environments. Here’s an example of a phishing attack that came in this week: 

It’s poorly worded, but still very effective. User clicks; account or browser hijacked.  

If you’d like help understanding what you’re seeing or not seeing, please click here to contact us.

What should I do now?

Below are three ways you can continue your journey to reduce data risk at your company:

1

Schedule a demo with us to see Varonis in action. We'll personalize the session to your org's data security needs and answer any questions.

2

See a sample of our Data Risk Assessment and learn the risks that could be lingering in your environment. Varonis' DRA is completely free and offers a clear path to automated remediation.

3

Follow us on LinkedIn, YouTube, and X (Twitter) for bite-sized insights on all things data security, including DSPM, threat detection, AI security, and more.

Try Varonis free.

Get a detailed data risk report based on your company’s data.
Deploys in minutes.

Keep reading

Varonis tackles hundreds of use cases, making it the ultimate platform to stop data breaches and ensure compliance.

go-with-the-flow:-how-a-shadow-dependency-led-to-a-cross-tenant-vulnerability-in-gcp-dataflow
Go With the Flow: How a Shadow Dependency Led to a Cross-Tenant Vulnerability in GCP Dataflow
Discover a critical cross-tenant vulnerability in Google Cloud Dataflow that allows attackers to exploit predictable bucket names for remote code execution.
php2shell:-one-upload,-full-server
PHP2Shell: One Upload, Full Server
Varonis Threat Labs' deep dive on the critical PHP2Shell vulnerabilities that allowed remote code execution, affecting millions of websites.
stealc-is-back,-and-this-time-it's-a-rat
StealC Is Back, and This Time It's a RAT
Four months after Operation Endgame took it down, StealC's seller returns with Stadia, a remote access trojan that shares StealC's code byte for byte.
frozen-privilege:-remote-code-execution-in-snowflake-managed-postgresql
Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQL
We uncovered a critical remote code execution vulnerability in Snowflake-managed PostgreSQL, highlighting hidden risks in cloud services.