Varonis Threat Labs discovered Dolphin X, a malware advertised on a cybercrime forum by a vendor using the alias “Kontraktnik,” that targets more than 300 applications including cryptocurrency wallets…
A new Windows information-stealer called Dolphin X, sold on a cybercrime forum by a vendor using the alias Kontraktnik, targets more than 300 applications and includes an AI profiler that ranks infect…
Varonis Threat Labs disclosed a Google Dialogflow CX flaw, dubbed Rogue Agent, on July 7, 2026, that could allow attackers with playbook update permission to persist malicious code inside enterprise c…
Varonis Threat Labs discovered a critical vulnerability in Google Cloud Platform's Dialogflow CX service, allowing attackers to hijack AI conversations, steal data, and launch further attacks. The fla…
Varonis Threat Labs researchers Doron Kapah and Mark Vaitsman launched Breach at the Beach, a Capture The Flag (CTF) training experience designed to teach security practitioners how to detect and resp…
Varonis Threat Labs disclosed a critical vulnerability chain called SearchLeak in Microsoft 365 Copilot Enterprise that could allow attackers to exfiltrate emails, MFA codes, and files via a one-click…
Varonis Threat Labs discovered a three-stage vulnerability chain called SearchLeak in Microsoft 365 Copilot Enterprise Search that allows attackers to exfiltrate sensitive data with a single click. Th…
Security researchers at Varonis Threat Labs disclosed a vulnerability chain in Microsoft 365 Copilot Enterprise Search, dubbed SearchLeak, that could allow attackers to steal emails, calendar data, an…
Varonis Threat Labs disclosed a critical one-click data-exfiltration vulnerability in Microsoft 365 Copilot Enterprise Search, tracked as CVE-2026-42824. The attack chains a parameter-to-prompt inject…
Varonis Threat Labs researchers created an OpenClaw autonomous email agent named "Pinchy" and ran four controlled phishing simulations that resulted in the exfiltration of AWS IAM keys, database crede…
Varonis Threat Labs created an OpenClaw AI agent named Pinchy and tested it against classic phishing simulations. The agent forwarded AWS IAM keys, database passwords, and SSH credentials to an extern…