
PHP2Shell: One Upload, Full Server
Varonis Threat Labs' deep dive on the critical PHP2Shell vulnerabilities that allowed remote code execution, affecting millions of websites.

Varonis Threat Labs' deep dive on the critical PHP2Shell vulnerabilities that allowed remote code execution, affecting millions of websites.

This acquisition strengthens Varonis’ ability to help organizations adopt safe, compliant and trustworthy AI at scale.


Varonis Threat Labs reveals how Outlook add-ins in Microsoft 365 can be exploited to exfiltrate sensitive email data without leaving forensic traces.

Varonis’ cloud-native Data Security Platform deploys in minutes and delivers immediate protection at scale.

A new malware toolkit called 'Stanley' spoofs websites while keeping the address bar intact and guarantees Chrome Web Store approval.

Varonis Concierge gives you expert, personalized guidance to secure sensitive data, optimize your platform, and achieve measurable security outcomes.

Varonis Threat Labs discovered a way to bypass Copilot’s safety controls, steal users’ darkest secrets, and evade detection.

Discover how AI-powered cyber threats, malicious LLMs, and advanced phishing are reshaping security and demanding smarter, data-centric defenses in 2026.

MongoBleed (CVE‑2025‑14847) is a critical unauthenticated memory-leak vulnerability in MongoDB Server that allows attackers to remotely extract uninitialized heap memory—including sensitive info like credentials.

Discover the latest phishing attack types, key statistics, and proven prevention strategies to protect organizations across email, messaging apps, and collaboration platforms.

See how Spiderman, a new phishing kit targeting customers of European banks, works. The kit features real-time credential theft, OTP capture, and advanced filtering.

See how attackers use the ROPC OAuth flow to bypass MFA and turn stolen passwords into persistent access, and how you can detect and stop it.
No posts found. Try another search or topic.