Featured content

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
AllData SecurityCloud SecurityAI SecurityThreat ResearchVaronis ProductsPrivacy & Compliance
It's Not a Bug, It's a Feature: Kubernetes Access to GCP Org Admin
Threat Research
No items found.
July 7, 2026

It's Not a Bug, It's a Feature: Kubernetes Access to GCP Org Admin

A standard Kubernetes permission can become organization-wide Google Cloud admin access when Config Connector holds broad IAM roles. Building off Justin O'Leary's research, here's how the ConfigConfusion attack works.

Sivan Zohar-Kotzer
August 25, 2026
SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon
Threat Research
No items found.
June 15, 2026

SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon

Varonis Threat Labs discovered SearchLeak, a critical vulnerability chain in Microsoft 365 Copilot Enterprise that allows an attacker to steal sensitive data — MFA codes, email messages, meeting details, and private organizational files — with a single click.

Dolev Taler
June 15, 2026
Varonis Atlas AI-SPM
AI Security
No items found.
May 26, 2026

What is AI Security Posture Management (AI-SPM)?

Explore the importance of AI Security Posture Management (AI-SPM) in safeguarding AI systems, ensuring compliance, and mitigating risks effectively.

Shawn Hays
October 6, 2026

No posts found. Try another search or topic.

Ready to see Varonis in action?

Schedule a demo
https://cdn.prod.website-files.com/6aad3cd63e81c645c771a0be/6aad48e61926ad27c8821c7b_varonis-conversion-blue.mp4
https://www.youtube-nocookie.com/embed/717uPD8k5nc