Title
Added a quick text block just to make testing a little easier.
Real threats require real guidance
Varonis Threat Labs (VTL) is our team of threat hunters and security researchers who uncover how real‑world attackers target data across every industry and environment. Their discoveries give CISOs and security practitioners clear, practical guidance to reduce blast radius, secure sensitive data, and stop emerging threats before they cause damage.
Explore this page to see the VTL team’s latest discoveries, best practices, and more.
Recent discoveries
-
February 24, 2026
1Campaign: A New Cloaking Platform Helping Attackers Abuse Google Ads
1Campaign is a new cloaking platform that helps attackers bypass Google Ads screening, evade security researchers, and keep phishing and crypto drainer pages online longer.
Daniel Kelley
-
February 19, 2026
How Cybercriminals Buy Access: Logins, Cookies, and Backdoors
Explore how cybercriminals buy VPN credentials, infostealer logs, breach databases, and web shells to access networks without writing a single exploit.
Daniel Kelley
-
January 23, 2026
Stanley — A $6,000 Russian Malware Toolkit with Chrome Web Store Guarantee
A new malware toolkit called 'Stanley' spoofs websites while keeping the address bar intact and guarantees Chrome Web Store approval.
Daniel Kelley
-
January 09, 2026
Cybercrime Predictions for 2026: What We’re Seeing from the Frontlines
Discover how AI-powered cyber threats, malicious LLMs, and advanced phishing are reshaping security and demanding smarter, data-centric defenses in 2026.
Lexi Croisdale
-
December 28, 2026
MongoBleed (CVE-2025-14847): Risk, Detection & How Varonis Protects You
MongoBleed (CVE‑2025‑14847) is a critical unauthenticated memory-leak vulnerability in MongoDB Server that allows attackers to remotely extract uninitialized heap memory—including sensitive info like credentials.
Chen Levy Ben Aroy
-
December 09, 2025
Spiderman Phishing Kit Mimics Top European Banks With A Few Clicks
See how Spiderman, a new phishing kit targeting customers of European banks, works. The kit features real-time credential theft, OTP capture, and advanced filtering.
Daniel Kelley
In the news
Fighting a Different Battle: Varonis’ Unique Approach to Cybersecurity
Beeping ComputerFighting a Different Battle: Varonis’ Unique Approach to Cybersecurity
CyberWireFighting a Different Battle: Varonis’ Unique Approach to Cybersecurity
CyberWireFighting a Different Battle: Varonis’ Unique Approach to Cybersecurity
Beeping ComputerFighting a Different Battle: Varonis’ Unique Approach to Cybersecurity
Fox NewsFighting a Different Battle: Varonis’ Unique Approach to Cybersecurity
Overline
Power Your 24×7 Data Defense
The same experts uncovering new attack techniques can monitor your data 24×7 through Varonis Managed Data Detection and Response service.