A critical vulnerability has been identified within Google Kubernetes Engine (GKE) that allows a Kubernetes user with limited permissions to gain complete control over an entire Google Cloud organization. Security researchers at Varonis detailed this exploit, which leverages the authority…
Reports mentioning Varonis
Varonis has introduced a new solution, Agent IBAC (Intent-Based Access Control), designed to address the critical security challenge of ensuring AI agents operate within their intended operational boundaries. AI agents, by their nature, require extensive access to data and systems…
Varonis launched the "Breach at the Beach" Capture the Flag (CTF) event this week, offering a free, hands-on experience for cybersecurity professionals to learn about and defend against attacks targeting Microsoft Entra ID.
A critical vulnerability discovered in Google's Dialogflow CX platform could have enabled attackers to hijack chatbots and compromise other agents within the same Google Cloud project. Security firm Varonis disclosed the flaw on May 15, 2024, detailing how an attacker…
Two security teams demonstrated this week that OpenClaw, a widely used self-hosted AI agent, can be manipulated into executing malicious code or divulging confidential information via seemingly innocuous inputs. Imperva researchers embedded instructions within shared contacts, vCards, and location pins…