Takeaways from SACR’s Email Security Report
Varonis security brief Perimeter-based email defenses miss AI-generated attacks that carry no obvious malicious link or attachment. A new report […]
Information Security
A Look Inside the HuggingFace Breach
Varonis security brief On July 16, 2026, HuggingFace disclosed a security breach in which an autonomous AI attacker infiltrated its internal infrastructure. The attacker chained two
Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
In this article Across the threat landscape, in this moment, one pattern sits at the center of the story: threat
ACR Stealer: Two observed intrusion chains amid increased threat activity
In this article From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer
Least privilege for AI agents: Identity, access, and tool binding
In this article AI agents aren’t only smarter API callers. They plan, chain actions across systems, and invoke tools in
Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
In this article On July 14, 2026, Microsoft Threat Intelligence identified a coordinated supply chain compromise of the @asyncapi npm
Turning threat intelligence into decisive action with Defender Experts
In this article Security teams have never had more visibility, yet rarely have they felt more uncertain. Signal pours in
AI Agents Are Creating a New Class of Employee Risk
Varonis security brief As AI becomes more autonomous, security shifts from controlling access to controlling actions and intent. Organizations need
Varonis Atlas Extends Coverage Across the Claude Enterprise Suite — From Claude Cowork to Claude Code
Varonis’ Atlas AI Security Platform now secures the entire Claude enterprise suite — extending existing support for Claude Enterprise and Claude Platform to Claude Code and Claude
Defending SaaS-based applications against ShinyHunters OAuth abuse
In this article In a series of campaigns observed between mid-2025 and mid-2026, Microsoft identified threat actor activity with overlapping