Varonis

?? Varonis is proud to be named a LEADER and a customer favorite in The Forrester Wave?: Data Security Platforms, Q1 2025! ?? Varonis not only had the highest scores in the strategy and current offering categories but also scored 5 out of 5 in 13 criteria, including: ?? Vision? ???Innovation? ???Data discovery? ???Data Classification? ???Data threat and risk visibility? ???Reporting? ?? Investigations, and six more! According to The Forrester Wave, “Varonis’ vision of harnessing deep data insights to automate remediation for data security outcomes stands out. Its demonstrated ability to execute and its approach to innovation and supporting services reinforce its differentiation.” Learn more here: https://hubs.ly/Q0397wFn0

The days of the Nigerian Prince are over! Say hello to the attacker intelligence era! ?? You might not have a wealthy individual popping up in your Facebook DMs who needs help transferring a large sum of money from their country and promising you a fortune in return, but you just might receive a text from your "CEO" who needs you to send them money in the form of gift cards. ?? Why the shift? Because today's phishing isn't yesterday's phishing. Social engineering attacks have become more strategic and precise, with attackers targeting individuals with more authority within an organization. Folks with: + Elevated permissions across a network + Access to remote tools and sensitive data + The ability to make significant financial transactions And this is just the tip of this advanced iceberg! To ensure your security team AND your users are ready to do their part in keeping your org safe in this era, Kyle Nielsen and Tom Barnea are diving into real-world examples of these sophisticated techniques discovered during investigations by our MDDR team in our latest blog ?? https://hubs.ly/Q03dvRwm0

It's not quite summer, but this month's edition of the Security Stack will have you riding the waves! ?? The Forrester Wave?, that is. ?? Here's what we're diving into: ?The Forrester Wave?: Data Security Platforms, Q1 2025 Report ? Detailed insights on the latest cyberattacks from our security experts ? Exclusive invites to the season's hottest cybersecurity events and more!

ICYMI: Varonis acquired Cyral (acquired by Varonis)! ?? Last week, we shared some SUPER exciting news, announcing the expansion of our world-class Data Security Platform to include Cyral's next-gen DAM technology that will give security teams the ability to shatter the silos that have traditionally separated structured and unstructured data security. And we weren't the only ones excited about the news! Check out this full round-up of our favorite press moments. ????? We're laser-focused in our relentless pursuit of protecting the world's data and equipping our customers with a modern, end-to-end platform to meet all their data security needs in every era. ?? Learn more about this exciting news: https://hubs.ly/Q03chh_b0

Guess who's back?! Back again. ?? DLP's back! Tell a friend! ?? Join us THIS Wednesday, March 26, at 12 p.m. ET for a live session featuring Matthew Radolec, VP of IR and Cloud Ops at Varonis, Pete Statia, Director of Information Security and Compliance at SAIA, and John Koester, CISO at Graphic Packaging as they dive into the foundation of next-gen data-loss prevention. Here's what's on the setlist: ?? The common challenges with legacy DLP solutions ?? Common attack strategies for exfiltrating data ?? Actionable tips to improve your data security posture ?? Best practices to prevent data loss in the cloud and on-prem ?? Outcomes to expect from adopting a next-gen DLP strategy PLUS, attendees will have the chance to win prizes like a PS5 or Beats Studio Headphones! There's still time to register and get a (front row) seat ?? https://hubs.ly/Q03cqR3H0

Every DSP provider that offers data security doesn't actually provide *complete* data security. Three DSP dupes you need to look out for ↓?? ?? Perimeter-Only: EDR, firewalls, and SIEM tools are essential for overall security strategy, but they aren't enough. An effective DSP protects the data itself and the tools in place from breaches and threats. ?? Ecosystem-Specific: Native security tools lack the ability to provide centralized, simplified management of data security across your entire environment in one central place. ?? Point Solutions: DSPM tools focus only on data discovery and classification, skipping data security, analyzing permissions risks, and remediating identity issues. We went even deeper with these DSP vendor green (and not-so-green) flags your team should be looking out for in our full guide including tips from seasoned CISOs. Grab your copy ?? https://hubs.ly/Q03bmRX80

??TRENDING: Rippling vs. Deel —?the first major case of corporate espionage in 2025! ?? Here's the TL;DR ?? 1?? What happened? Rippling, a leader in workforce management software, filed a lawsuit against its competitor, Deel, accusing it of planting a spy and exfiltrating customer and competitive information.? ? 2?? What was the impact? The Ireland-based????? spy was able to discover and exfiltrate customer and competitive information from Salesforce, Slack, Google Workspace, and more. After the case was filed and news broke this week, we quickly investigated what happened, how, and where mitigations could have prevented a four-month spy campaign like this one. Learn how to catch a spy in this blog by Shawn (Rosco) Hays: https://hubs.ly/Q03cNC8M0

?? Salt Typhoon — an APT group responsible for a series of breaches targeting United States infrastructure and government agencies.??? Here's what you need to know and why ?? ?? What do we know about the group? There is significant evidence that the group, allegedly backed by China’s Ministry of State Security, comprises multiple distinct operating teams, each responsible for different victim sectors and operational responsibilities, which means a high degree of organization and maturity. ?? Why should Salt Typhoon and its recent impact matter to your org? + The group is an APT backed by China MSS + There is a victim emphasis on corporate data theft and government counterintelligence? + The focus is espionage rather than disruption (a.k.a stealing sensitive data) + They attempt to maintain a stealthy and long-term presence in compromised networks? + They rely on Living Off the Land Binaries (LOLBINS) as well as custom tools The Varonis Threat Labs team broke down the history, recent activity, common TTPs used by the group, and an action plan for how to keep your org safe in this full profile: https://hubs.ly/Q03cLs0n0

To AI or (not) to AI, that is the question! ?? Here's the thing. You can certainly make the use case for everyone in your org to have access to AI tools, but the question most orgs are struggling with when it comes to AI access isn't if they *should* make AI tools available, but if they *can*. Why is this the struggle? A lack of governance programs hinders org-wide deployments. This is just the start of the many questions security pros face as they navigate these AI-infested waters. ?? But fear not—we have just the thing to empower you on your AI journey! In this blog, Shawn Hays Hays dives into the top AI security questions (and answers) that cybersec pros need to know to take REAL action on your AI security strategy in 2025 ?? https://hubs.ly/Q03cyT730

?? BIG NEWS: Varonis acquires Cyral (acquired by Varonis) We're excited to announce that Varonis has acquired Cyral. This expansion of our world-class Data Security Platform to include next-gen DAM technology will give security teams the ability to shatter the silos that have traditionally separated structured and unstructured data security. Paired with our existing AI-powered platform, the addition of Cyral will bring advanced database security and compliance capabilities to our customers, giving teams: ?? Real-time query logging with enriched context across on-prem and cloud data sources ?? SSO and MFA across all databases using existing IDPs, with no need for shared credentials.? ??? Just-in-time authorization policies for detailed, flexible, and timely control over sensitive data ?? Service account resolution to the individual user behind the app or tool for more detailed auditing This is another exciting milestone in our relentless pursuit of protecting the world's data and equipping our customers with a modern, end-to-end platform to meet all their data security needs in every era. ?? Learn more about the news: https://hubs.ly/Q03chh_b0