
November 6, 2026
NotC2: How We Built an AI-Powered C2 Channel With AWS Services
Varonis Threat Labs built NotC2, a proof-of-concept C2 framework that uses native AWS and Amazon Bedrock to process natural-language commands.
Varonis Threat Labs is our innovative team of threat hunters.
Their mission is to find, fix, and alert the world to cyber threats before damage is done.

November 6, 2026
Varonis Threat Labs built NotC2, a proof-of-concept C2 framework that uses native AWS and Amazon Bedrock to process natural-language commands.

October 23, 2026
Discover a critical cross-tenant vulnerability in Google Cloud Dataflow that allows attackers to exploit predictable bucket names for remote code execution.

October 22, 2026
Four months after Operation Endgame took it down, StealC's seller returns with Stadia, a remote access trojan that shares StealC's code byte for byte.

October 22, 2026
Varonis Threat Labs' deep dive on the critical PHP2Shell vulnerabilities that allowed remote code execution, affecting millions of websites.

October 17, 2026
We uncovered a critical remote code execution vulnerability in Snowflake-managed PostgreSQL, highlighting hidden risks in cloud services.

September 23, 2026
Varonis Threat Labs discovered AvisLoader, a new Windows malware loader built to keep its command-and-control (C2) channel beyond the reach of traditional domain takedowns.
Meet the team

Rotem Tsadok leads Security Operations and Forensics at Varonis, directing investigations into advanced threats targeting sensitive data across hybrid environments. With deep blue and red-team expertise, he blends adversary emulation and incident response strategy with hands-on execution to guide complex technical and customer-facing teams. He has driven enterprise-scale initiatives that strengthen security posture and accelerate business impact. A dynamic speaker with 15+ years in the field, Rotem delivers practitioner-focused sessions packed with real-world tactics and lessons learned.

Joe is a passionate and dedicated blue-teamer with experience in a wide array of specialties such as Detection Engineering, Threat Hunting, Incident Response, and Cyber Intelligence. He currently leads Varonis’ Forensics group, a team primarily assisting customers with their response to critical breach events, for North Amera, Europe, and Australia. His interests and experience include reverse engineering, detection engineering, threat hunting, compromise assessment, threat deception and tool development for both red and blue team functionalities.

Mark Vaitzman is a Security Research Team Leader at Varonis, a leader in data security. As a passionate cybersecurity expert, Mark holds extensive experience in leading security threat and research teams in various cybersecurity companies, analyzing emerging threats, incident response and developing innovative solutions. He is also a lecturer at Cyber Security College, sharing his knowledge and shaping the next generation of cybersecurity professionals. Mark previously presented at CrestCon, DeepSec, and Black Hat USA. In his free time, he likes sailing in the sea and riding a motorcycle.

Dor Yardeni is the Director of Security Research at Varonis, leading the team responsible for the detection engine that protects thousands of customers worldwide. With more than a decade of experience in cybersecurity, Dor specializes in red teaming, incident response, and detection engineering. His work focuses on data‑driven research, including building advanced threat detection models, reporting vulnerabilities in critical infrastructure systems, and investigating large‑scale ransomware incidents.

Yogev Madar is a Director of Security Research at Varonis, leading teams that drive advanced threat and product‑focused security research across cloud, data, and identity domains. He leads cross‑functional initiatives with engineering groups and directs research efforts to uncover novel vulnerabilities and attack techniques in major cloud platforms, translating real‑world attacker behavior and customer risk into actionable product outcomes. With a background in offensive security research, Yogev brings an attacker’s mindset to defensive strategy, while focusing today on research leadership, mentorship, and building scalable security capabilities that directly support Varonis’ product innovation.

Maya Parizer is a Security Researcher at Varonis with a passion for cloud security, identity, and data protection, specializing in IaaS and AI. Maya dives deep into every project, thoroughly investigating cloud environments to uncover potential vulnerabilities and stealthy attack techniques. Her experience spans both offensive and defensive disciplines — including CSPM, DSPM, vulnerability research, detection engineering, and product security research in cloud environments.

Doron is an experienced security researcher at Varonis Threat Labs. He primarily focuses on advanced threat detection capabilities, threat hunting, AI, and cloud security. Doron also has extensive experience in building innovative cybersecurity product solutions, CTFs and has authored multiple publications in both state-sponsored and cybercrime threat intelligence domains.

Tamir Yehuda is a Senior Security Researcher and cloud security team lead at Varonis. He is a full-stack hacker with experience in malware analysis, Windows & AD domains, SaaS applications, and cloud infrastructure. Tamir specializes in IaaS & PaaS research focusing mainly on Azure, GCP, AWS, Salesforce, and ServiceNow. He brings over eight years of experience in various types of security research and red teaming

Dolev Taler is a senior security researcher at Varonis Threat Labs with over a decade of cybersecurity experience spanning red teaming, reverse engineering, vulnerability research, and malware analysis. He is passionate about machine learning and its pivotal role in modern threat detection, having developed advanced detection models, investigated ransomware attacks for major global enterprises, and reported vulnerabilities in critical infrastructure systems. Beyond tackling high-stakes cyber threats, Dolev also enjoys perfecting the art of coffee brewing and improving his lock-picking skills.

Chen Levy Ben Aroy is a distinguished cybersecurity leader with a proven track record in cloud security, penetration testing, and red teaming. As a Cloud Security Research Team Lead at Varonis, Chen spearheads cutting-edge security research and innovation across multiple cloud-providers and platforms. His previous roles at well-known enterprises, such as Prosche Digital and ABInbev, showcased his expertise in advanced malware development and strategic project management. With a robust background in a wide array of cybersecurity domains, Chen's visionary approach and technical acumen make him a sought-after expert in the industry.

Tal Peleg, also known as TLP, is a senior security researcher and cloud security team lead at Varonis. He is a full-stack hacker with experience in malware analysis, Windows domains, SaaS applications, and cloud infrastructure. His research is currently focused on cloud applications, APIs, and agentic applications.

Lior is a Senior Security Researcher at the forefront of cloud and SaaS security, with a background rooted in red teaming, penetration testing, and incident response with a background in advanced research at Palo Alto Networks and Team8 his current work dives into the practical security challenges of the Cloud, SaaS, and AI. As a contributor to the LOLBAS project, Lior is a firm believer in the "attacker’s perspective," focusing on how built-in tools can be subverted to bypass modern defenses. He is an active member of the offensive security community and most recently led technical workshops at DEF CON 33.
PROTECT AGAINST MATERIAL DATA BREACHES
The same experts uncovering new attack techniques can monitor your data 24×7 through Varonis Managed Data Detection and Response service.