Varonis Threat Labs

Search everything

Mentions · 7d1
Mentions · 30d4
All mentions6
First seenAug 18, 2026
Last mentioned5h ago

Timeline

6 articles · newest first

Varonis Discovers NotC2 AI-Powered C2 Framework

NotC2 uses AWS Bedrock to interpret natural language commands and routes them via SQS, Lambda, and SNS.

Cyber Security News11:26 UTC · 5h agoMalwareExploited2 sources

StealC seller relaunches as Stadia RAT for Windows

Version 1.1.2 adds hidden desktop control, a shell, and a loader; Varonis ties its helper to StealC 3.5.

Cyber Security NewsOct 23, 13:40 UTC · 17d agoMalware2 · 1 read

StealC seller returns with Stadia remote access trojan

Varonis says the October 16 offering adds hidden desktop, command execution and loaders on top of StealC 3.5.0 theft.

GBHackersOct 23, 12:34 UTC · 17d agoMalware1

Snowflake Postgres role chain reached OS command execution, now fixed

Varonis chained CREATEROLE, pg_cron, and archive_command in its own test tenant; Snowflake patched before publication.

GBHackersOct 19, 13:27 UTC · 21d agoVulnerability2

Rogue external MFA providers can steal passwords during logins

Varonis 'TrustSink' shows attackers with privileged Entra access can register rogue external MFA providers to harvest plaintext passwords during logins.

BleepingComputerSep 22, 21:45 UTC · Sep 22, 2026Research1

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

Varonis discloses CoSnitch (CVE-2026-24301), three Microsoft Copilot Personal flaws enabling one-click exfiltration of connected-app data; patched August 18, 2026.

The Hacker NewsAug 18, 17:51 UTC · Aug 18, 2026AI safety & securityCVE-2026-24301 CVE-2026-242995 · 1 read

Related CVEs

by mentions

CVE-2026-243012%7.5
Command Injection in Microsoft Copilot Allows Information Disclosure
published Aug 18, 2026Microsoft Copilot
CVE-2026-24299<1%5.3
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information…
published Mar 19, 2026microsoft 365 copilot

Appears with

Microsoftvendor · 2
Varonisvendor · 2
Stadiamalware · 2
StealCmalware · 2
Microsoft Copilot Personalproduct · 1
Snowflakevendor · 1
Microsoft Defenderproduct · 1
Snowflake Postgresproduct · 1
Google Driveproduct · 1
MSRCorganization · 1
Google Chromeproduct · 1
Windowsproduct · 1
Microsoft Edgeproduct · 1
Dirk-Jan Mollemaorganization · 1
Microsoftorganization · 1
Amazon Bedrockproduct · 1

Entities are extracted by the model from each article. First seen Aug 18, 2026, last mentioned 5h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.