Secure AI and the data that powers it

Miami, FL
Joined February 2009
Enable AI with confidence in your data. 🦾 Varonis is proud to announce our integration with Collibra to bring security and governance context together. Successful AI initiatives start with data that organizations can find, understand, and use safely. Having that knowledge built directly into the tools you're already using makes it fast, easy, and safe to adopt AI. With this new integration, Collibra users will have visibility and context into what data is sensitive to make better-informed decisions on data and AI initiatives across their organizations. Read more about Varonis for Collibra here: varonis.com/blog/varonis-and…
89
EXCITING NEWS: Varonis is combining with @Proofpoint to create one of the leading pure-play cybersecurity companies in the world. The future belongs to organizations that can secure people, agents, and data. By uniting two complementary technologies, we can move faster to bring secure, trustworthy AI to organizations around the world. Learn more: varonis.com/blog/proofpoint
4
384
Who do you have in your cybersecurity starting line-up? 🏈 With Varonis, your organization gets the most well-rounded team in the game. There's no one who can defend better, out-score, or intercept more than us. Here's how we do it: 🦾 Next-gen DAM brings next-level defense to databases. With an agentless defense that deploys fast, not a single play goes unchecked. The fields covered endzone to endzone. 🤚 Interceptor keeps threats locked down. With a 99% overall threat interception rate, nothing is getting past. Interceptor even goes beyond what's on the field. Even when it's not actively making plays, it's scanning millions of URLs per day to stop threats before they gain access. 🌎 Atlas makes the big plays that turn the tide against AI. With features like Agent IBAC, AISPM, and pentesting in its back pocket, Atlas understands AI security like no one else. With its direct integration to key players, like Claude Code, Atlas is a playmaker you'll want on game day. Keeping data safe is a team sport. Having the right players by your side makes the difference.
1
179
Varonis Threat Labs found TrustSink, a technique that turns Microsoft Entra ID logins into a password trap. A rogue external MFA provider captures passwords on a fake Microsoft page, then lets the login finish. Resetting the password doesn't remove it. varonis.com/blog/trustsink
1
4
20,639
Setting the pace on AI Security.🦾 We're proud to share that Varonis has been named a Pace Setter in the Gartner® Emerging Market Quadrant for AI Application Security. Organizations are racing to adopt AI, but most are flying blind about which data their AI systems can actually access. This recognition reflects what we've been building toward: giving security teams the visibility and control to adopt AI safely, without slowing anyone down. Varonis Atlas is the only platform that secures the entire AI security lifecycle. We're empowering organizations to safely adopt AI and letting teams innovate at the speed of AI. We believe this recognition reflects Varonis Atlas's ability to close that gap and validates the growing demand for security platforms that can discover, govern, and protect data across the full AI lifecycle. Read more: varonis.com/blog/gartner-emq…
2
373
A password reset won't get you out of this one. Meet TrustSink: the technique that turns a rogue external MFA provider into a persistent credential trap inside Microsoft Entra ID. Privileged attackers could register a lookalike authentication provider and insert a pixel-accurate password page into the legitimate sign-in flow. The page captures the password in plaintext while a valid signed token completes the login, no errors, no red flags. A rogue provider remains in the flow and captures the next password, even after you reset it. Full research, detection steps, and mitigation: varonis.com/blog/trustsink
2
1
4
298
30% of your data is ROT: redundant, obsolete, or trivial. That's not just wasted storage. It's a wider blast radius, slower AI adoption, and data you're legally on the hook for. Introducing Varonis Data Lifecycle Management, helping you manage data from creation to deletion automatically. Varonis DLM finds every duplicate, stale file, and expired record across your data estate, helping you: ✔ Cut storage costs ✔ Reduce your blast radius ✔ Automate compliance and retention ✔ Feed AI only the data that deserves to exist Read more about Varonis DLM here: varonis.com/blog/introducing…
🤖 Made with AI
1
1
231
Machine identities now outnumber human ones by more than 80 to 1. That number includes service accounts, API keys, and a growing population of AI agents, each with its own set of permissions, and most with far more access than they actually need. Here's the problem: identity security programs were built around people. Reviews, access certifications, and offboarding. all designed for a human on the other end of the account. Agents don't fit that model. They're provisioned quickly, rarely reviewed, and often forgotten the moment a project ends. The result is a form of exposure that most security teams can't yet see: a sprawling, unmanaged layer of non-human identities sitting atop sensitive data. This is exactly the gap Varonis Atlas was built to close. Atlas continuously discovers every AI system in your environment, whether it's agents, LLMs, embedded AI, or shadow AI, and evaluates which data each can actually access. You can't govern what you can't see. That ratio isn't going to shrink. The question is: does your team know what your 80 are doing right now?
213
Our Snowflake partnership just got an upgrade. ❄️ We're proud to announce that Varonis has achieved Premier Partner status in the @SPN_Partners Network and is now available on the Snowflake Marketplace. AI agents, copilots, and LLMs now read, write, and act on data in Snowflake at machine speed. Varonis gives security teams visibility into where sensitive data lives, who can access it, and how it's used, so they can move fast with AI without losing control of their data. We're excited to continue helping Snowflake users safely leverage AI. Learn more about our partnership here: varonis.com/blog/varonis-ava…
2
296
Your AI agent isn't malicious. It's just not being watched. Most agents are given access based on what they could need, not what they actually use. Over time, that gap becomes the blast radius. Recognizing the signs early can help protect your organization from trouble. Here are three things to be on the lookout for👇
2
207
AI assistants introduce new security considerations for enterprise teams. This security analysis by @varonis examines how indirect prompt attacks can affect AI-powered workplace tools and what organizations can do to reduce the risk:

10
45
297
1,644,281
Stealing 10 terabytes used to be the attacker's problem too. Too much data to make sense of AI removed that bottleneck. Old stolen data is being reprocessed for new ways to monetise it.The breach you had two years ago isn't finished. Simon Biggs @varonis
1
1
184
Not every security problem involving AI is an AI security problem. Some attacks are new. Others are old attacks moving faster. We spoke to David Gibson from @varonis about where existing security models still work and where they break with AI agents. #AISecurity
1
3
200
Meet CoSnitch: that vulnerability that CoPilot itself told our threat researchers about. No clicks. No warnings. No confirmations. And it can plant instructions in your Copilot memory that survive a password reset. Microsoft has now patched all three, but this is the third flaw of this type our team has found this year, and the pattern keeps repeating. 🔗: varonis.com/blog/cosnitch
2
1
6
478
One click. Zero jailbreak. Full data exposure. Varonis Threat Labs just released RovoBlast, a vulnerability in Atlassian's AI assistant, in which a single crafted link can seed attacker instructions directly into a user's trusted session. No prompt surgery. No permission bypass. No warning shown to the user. This is the same pattern we've now seen across Copilot, Gemini, ChatGPT, and more: Enter → Evade → Escape. Untrusted input becomes a command, guardrails don't catch it, and a built-in feature becomes the exit door. Atlassian has since resolved this vulnerability. 🔗 Read the research: lnkd.in/emk4dqKi
2
4
582
Introducing Agent IBAC, the latest expansion to Varonis Atlas. 🦾 Access control for AI agents isn't yes/no. It's "should THIS agent take THIS action with THIS data?" Atlas gets the answer and stops it when it's no. Learn more: varonis.com/blog/agent-inten…
2
269
300+ apps. One archive. Zero manual work for the attacker. Varonis Threat Labs tore apart Dolphin X, a new Windows stealer's operator panel. It grabs 9 browsers, 100+ wallet extensions, SSH keys, and 30+ cloud CLI tools in one pass. Link below! 🧵
1
3
5
1,135
🚨 Robots vs. robots isn't a distant future. It's now. An autonomous AI breached HuggingFace, chaining exploits at machine speed. Their own AI's guardrails wouldn't let it study the attack. Is yours allowed to fight back? Learn more here: varonis.com/blog/huggingface…
2
3
486