Intent-based protection for every human and every AI agent, across all data. Follow @threatinsight for updates on the threat landscape.

Sunnyvale, CA
Joined February 2009
Proofpoint retweeted
Congratulations @proofpoint on its acquisition of Varonis ⚡️ A super milestone for all the team!  Well done 🚀 #NYSEWired #theCUBE
2
3
208
A transformational moment for cybersecurity. @Proofpoint’s agreement to acquire @Varonis for $6.3B brings together two leaders to help companies protect the data powering enterprise AI. Congratulations to Sumit, Yaki and both teams!
Proofpoint has entered into a definitive agreement to acquire @Varonis, a leader in data and AI security. Details: proofpoint.com/us/newsroom/p… The combination will establish the industry's largest data and AI cybersecurity organization, bringing together distinct strengths to deliver a unified platform for protecting people, data, and AI. Our CEO, Sumit Dhawan, shares more here: proofpoint.com/us/blog/corpo…
1
7
1
17
3,534
Just announced: CoGUI has been disrupted. Proofpoint supported @Microsoft in the major takedown of Chinese-speaking cybercrime threat actors and CoGUI, the infrastructure supporting their activities. More details: proofpoint.com/us/blog/threa…
1
5
5
2,316
Proofpoint retweeted
This night in @proofpoint #Project26 is delivering moments worth remembering.
4
5
141
Within 90 seconds of compromise, a threat actor triggered multiple post-access sequences. Our threat researchers believe this activity was AI-enabled. Our new blog examines this active TeamFiltration campaign, tracked as UNK_CondorFiltration. proofpoint.com/us/blog/threa…
1
5
1
3
3,631
Proofpoint retweeted
🤝 No single vendor can secure the agentic enterprise alone. That's why we're launching the @the_blueprintai — cross-industry coalition with @AWS , @CrowdStrike , @databricks , @Docker , @GEAppliancesCo , @googlecloud , @Lovable , @proofpoint , @salesforce , @ServiceNow , @wiz_io , @WCKitchen , and @zscaler . Together, we're building an open reference architecture to answer 4 critical questions: Where are my agents? What can they do? What are they doing? How do I respond? Learn more: okta.com/newsroom/press-rele…
7
4
3
24
3,950
Proofpoint has observed a Chinese-speaking threat actor (TA4922) using a command and control (C2) framework called PackClient. The framework enables data theft, surveillance, and downloading of additional plugins and payloads. Blog: proofpoint.com/us/blog/threa… #phishing #emailrisk
2
22
2
57
8,405
Join us for the Aug. 26 livestream of Intercepted. ☁️ TOPIC: THE EVOLVING CLOUD THREAT LANDSCAPE ☁️ 🎥: proofpoint.com/uk/resources/… We'll look at how traditional brute-force methodology is evolving and how threat actors are using spoofing techniques to level up their capabilities.
2
1
2,585
Russian state-backed hackers have spent the past year targeting employees in the US and NATO countries using an email exploit that steals comms just by having a target open a message, no clicks required. Our @greglesnewich shared his insights with @CNN. cnn.com/2026/07/23/politics/…
7
15
2,636
🚨 We are following up with additional observations of the TA488’s use of “half-click” exploits. The group has initiated a new wave of exploitation abusing a cross-site scripting (XSS) vulnerability, CVE-2026-42897, in Outlook Web Access (OWA). New blog: proofpoint.com/us/blog/threa…
Today we are releasing a pair of reports: First: a joint release with NSA, FBI, and the allies, on TA488 (Void Blizzard, Laundry Bear) using half-click XSS exploits
2
11
1
15
6,854
Our @Proofpoint AI threat researchers continue to observe activity on underground criminal forums, suggesting that Indirect Prompt Injection (IDPI) could soon be leveraged as an intrusion vector. Explore the methods being actively developed and sold: proofpoint.com/us/blog/threa….
1
7
8
2,200
Today we are releasing a pair of reports: First: a joint release with NSA, FBI, and the allies, on TA488 (Void Blizzard, Laundry Bear) using half-click XSS exploits
3
36
7
153
39,965
Our researchers discovered that a Russia-aligned threat actor was exploiting a previously unknown (zero-day) vulnerability against Zimbra mailservers. We alerted gov't partners, with whom we have collaborated on further discovery. @NSACyber @FBI Blog: proofpoint.com/us/blog/threa….
1
11
17
2,144
The StealC ecosytem #OperationEndgame led to the seizure of more than 25.6M unique creds stolen from over 385k compromised sites. @Proofpoint was proud to contribute to the operation alongside industry partners. Listen for a scoop inside the disruption. proofpoint.com/us/podcasts/d…
4
4
1,545
Proofpoint Account Takeover protection has detection mechanisms specifically designed to identify FIDO downgrade scenarios. It leverages extensive threat intel, behavioral and ML analytics, and cloud monitoring to provide detection of account takeovers and malicious actions.
1
1
1
691
Researchers at @Proofpoint are tracking Cruciferra, a crypter service that is used by multiple unrelated threat actors. The self-proclaimed “underground's most lethal crypter” has been observed delivering a wide range of RATs and infostealers. Blog: proofpoint.com/us/blog/threa….
1
23
2
48
16,597
Back by popular demand, sr. threat researcher Joe Wise will join our next Intercepted livestream on July 22nd. Joe will share real examples of active threat campaigns, malware samples, tips, tricks, and more research for defenders. Register to join us 👉 proofpoint.com/uk/resources/…
4
2
1,274
Proofpoint has identified OAuth client ID spoofing emerging as a stealthy account enumeration technique targeting Microsoft Entra ID. Attackers can validate usernames and infer credential validity, all without generating a successful sign-in event. proofpoint.com/us/blog/threa…
1
6
5
1,457