Varonis Threat Labs

Varonis Threat Labs is our innovative team of threat hunters.
Their mission is to find, fix, and alert the world to cyber threats before damage is done.

NewJanuary 22, 2025Lorem ipsum dolor sit amet consectetur. Malesuada augue eget quisque.

Novel discoveries

StealC Is Back, and This Time It's a RAT

October 22, 2026

StealC Is Back, and This Time It's a RAT

Four months after Operation Endgame took it down, StealC's seller returns with Stadia, a remote access trojan that shares StealC's code byte for byte.

Varonis Threat Labs
Varonis Threat Labs
PHP2Shell: One Upload, Full Server — PHP vulnerability research

October 22, 2026

PHP2Shell: One Upload, Full Server

Varonis Threat Labs' deep dive on the critical PHP2Shell vulnerabilities that allowed remote code execution, affecting millions of websites.

No items found.

In the news

Meet the team

The minds behind VTL

Rotem Tsadok

Rotem Tsadok

Senior Director of Security Operations and Forensics

LinkedIn ↗

Rotem Tsadok leads Security Operations and Forensics at Varonis, directing investigations into advanced threats targeting sensitive data across hybrid environments. With deep blue and red-team expertise, he blends adversary emulation and incident response strategy with hands-on execution to guide complex technical and customer-facing teams. He has driven enterprise-scale initiatives that strengthen security posture and accelerate business impact. A dynamic speaker with 15+ years in the field, Rotem delivers practitioner-focused sessions packed with real-world tactics and lessons learned.

Rotem Tsadok
Joseph Avanzato

Joseph Avanzato

SecOps/Digital Forensics & Incident Response Group Leader

LinkedIn ↗

Joe is a passionate and dedicated blue-teamer with experience in a wide array of specialties such as Detection Engineering, Threat Hunting, Incident Response, and Cyber Intelligence. He currently leads Varonis’ Forensics group, a team primarily assisting customers with their response to critical breach events, for North Amera, Europe, and Australia. His interests and experience include reverse engineering, detection engineering, threat hunting, compromise assessment, threat deception and tool development for both red and blue team functionalities.

Joseph Avanzato
Mark Vaitsman

Mark Vaitsman

Security Research Team Leader

LinkedIn ↗

Mark Vaitzman is a Security Research Team Leader at Varonis, a leader in data security. As a passionate cybersecurity expert, Mark holds extensive experience in leading security threat and research teams in various cybersecurity companies, analyzing emerging threats, incident response and developing innovative solutions. He is also a lecturer at Cyber Security College, sharing his knowledge and shaping the next generation of cybersecurity professionals. Mark previously presented at CrestCon, DeepSec, and Black Hat USA. In his free time, he likes sailing in the sea and riding a motorcycle.

Mark Vaitsman
Dor Yardeni

Dor Yardeni

Director of Security Research

LinkedIn ↗

Dor Yardeni is the Director of Security Research at Varonis, leading the team responsible for the detection engine that protects thousands of customers worldwide. With more than a decade of experience in cybersecurity, Dor specializes in red teaming, incident response, and detection engineering. His work focuses on data‑driven research, including building advanced threat detection models, reporting vulnerabilities in critical infrastructure systems, and investigating large‑scale ransomware incidents.

Dor Yardeni
Yogev Madar

Yogev Madar

Director of Security Research

LinkedIn ↗

Yogev Madar is a Director of Security Research at Varonis, leading teams that drive advanced threat and product‑focused security research across cloud, data, and identity domains. He leads cross‑functional initiatives with engineering groups and directs research efforts to uncover novel vulnerabilities and attack techniques in major cloud platforms, translating real‑world attacker behavior and customer risk into actionable product outcomes. With a background in offensive security research, Yogev brings an attacker’s mindset to defensive strategy, while focusing today on research leadership, mentorship, and building scalable security capabilities that directly support Varonis’ product innovation.

Yogev Madar
Maya Parizer

Maya Parizer

Security Researcher

LinkedIn ↗

Maya Parizer is a Security Researcher at Varonis with a passion for cloud security, identity, and data protection, specializing in IaaS and AI. Maya dives deep into every project, thoroughly investigating cloud environments to uncover potential vulnerabilities and stealthy attack techniques. Her experience spans both offensive and defensive disciplines — including CSPM, DSPM, vulnerability research, detection engineering, and product security research in cloud environments.

Maya Parizer
Doron Kapah

Doron Kapah

Security Researcher

LinkedIn ↗

Doron is an experienced security researcher at Varonis Threat Labs. He primarily focuses on advanced threat detection capabilities, threat hunting, AI, and cloud security. Doron also has extensive experience in building innovative cybersecurity product solutions, CTFs and has authored multiple publications in both state-sponsored and cybercrime threat intelligence domains.

Doron Kapah
Tamir Yehuda

Tamir Yehuda

Cloud Security Research Team Leader

LinkedIn ↗

Tamir Yehuda is a Senior Security Researcher and cloud security team lead at Varonis. He is a full-stack hacker with experience in malware analysis, Windows & AD domains, SaaS applications, and cloud infrastructure. Tamir specializes in IaaS & PaaS research focusing mainly on Azure, GCP, AWS, Salesforce, and ServiceNow. He brings over eight years of experience in various types of security research and red teaming

Tamir Yehuda
Dolev Taler

Dolev Taler

Security Researcher

LinkedIn ↗

Dolev Taler is a senior security researcher at Varonis Threat Labs with over a decade of cybersecurity experience spanning red teaming, reverse engineering, vulnerability research, and malware analysis. He is passionate about machine learning and its pivotal role in modern threat detection, having developed advanced detection models, investigated ransomware attacks for major global enterprises, and reported vulnerabilities in critical infrastructure systems. Beyond tackling high-stakes cyber threats, Dolev also enjoys perfecting the art of coffee brewing and improving his lock-picking skills.

Dolev Taler
Chen Levy Ben Aroy

Chen Levy Ben Aroy

Cloud Security Research Team Leader

LinkedIn ↗

Chen Levy Ben Aroy is a distinguished cybersecurity leader with a proven track record in cloud security, penetration testing, and red teaming. As a Cloud Security Research Team Lead at Varonis, Chen spearheads cutting-edge security research and innovation across multiple cloud-providers and platforms. His previous roles at well-known enterprises, such as Prosche Digital and ABInbev, showcased his expertise in advanced malware development and strategic project management. With a robust background in a wide array of cybersecurity domains, Chen's visionary approach and technical acumen make him a sought-after expert in the industry.

Chen Levy Ben Aroy
Tal Peleg

Tal Peleg

DA Cloud Research Team Leader

LinkedIn ↗

Tal Peleg, also known as TLP, is a senior security researcher and cloud security team lead at Varonis. He is a full-stack hacker with experience in malware analysis, Windows domains, SaaS applications, and cloud infrastructure. His research is currently focused on cloud applications, APIs, and agentic applications.

Tal Peleg
Lior Adar

Lior Adar

Senior Security Researcher

LinkedIn ↗

Lior is a Senior Security Researcher at the forefront of cloud and SaaS security, with a background rooted in red teaming, penetration testing, and incident response with a background in advanced research at Palo Alto Networks and Team8 his current work dives into the practical security challenges of the Cloud, SaaS, and AI. As a contributor to the LOLBAS project, Lior is a firm believer in the "attacker’s perspective," focusing on how built-in tools can be subverted to bypass modern defenses. He is an active member of the offensive security community and most recently led technical workshops at DEF CON 33.

Lior Adar

PROTECT AGAINST MATERIAL DATA BREACHES

Power your 24×7 data defense

The same experts uncovering new attack techniques can monitor your data 24×7 through Varonis Managed Data Detection and Response service.