Varonis Blog | All Things Data Security | Tal Peleg and Nitay Bachrach

{"avatar":"https://info.varonis.com/hubfs/preview-full-Blog_AuthorPhoto_ThreatLabs_202103_FNL.webp","bio":"Tal Peleg is a senior security researcher at Varonis. Also known as TLP, Tal is a full-stack hacker with experience in malware analysis, Windows domains, web servers, and cloud. His research is currently focused on cloud applications and APIs. Nitay is a security researcher based in Tel Aviv, but you might encounter him anywhere in world. He is a cloud security expert, highly experienced in offensive security operations and reverse engineering. Nitay’s expertise also includes IoT devices, Linux, and local network security.","cdnPurgeEmbargoTime":null,"cosObjectType":"BLOG_AUTHOR","created":1674065647390,"deletedAt":0,"displayName":"Tal Peleg and Nitay Bachrach","email":"","facebook":"","fullName":"Tal Peleg and Nitay Bachrach","gravatarUrl":null,"hasSocialProfiles":false,"id":99032179835,"label":"Tal Peleg and Nitay Bachrach","language":"en","linkedin":"","name":"Tal Peleg and Nitay Bachrach","portalId":142972,"slug":"tal-peleg-and-nitay-bachrach","translatedFromId":null,"translations":{"de":{"email":"","fullName":"Tal Peleg and Nitay Bachrach","id":101101249108,"language":"de","masterId":99032179835,"name":"Tal Peleg and Nitay Bachrach","slug":"tal-peleg-and-nitay-bachrach"},"es":{"email":"","fullName":"Tal Peleg and Nitay Bachrach","id":157080582447,"language":"es","masterId":99032179835,"name":"Tal Peleg and Nitay Bachrach","slug":"tal-peleg-and-nitay-bachrach"},"fr":{"email":"","fullName":"Tal Peleg and Nitay Bachrach","id":101101333828,"language":"fr","masterId":99032179835,"name":"Tal Peleg and Nitay Bachrach","slug":"tal-peleg-and-nitay-bachrach"},"it":{"email":"","fullName":"Tal Peleg and Nitay Bachrach","id":122353233158,"language":"it","masterId":99032179835,"name":"Tal Peleg and Nitay Bachrach","slug":"tal-peleg-and-nitay-bachrach"},"pt-br":{"email":"","fullName":"Tal Peleg and Nitay Bachrach","id":101101249199,"language":"pt-br","masterId":99032179835,"name":"Tal Peleg and Nitay Bachrach","slug":"tal-peleg-and-nitay-bachrach"}},"twitter":"","twitterUsername":"","updated":1674065933595,"userId":null,"username":null,"website":"https://www.varonis.com"}

Tal Peleg and Nitay Bachrach

Tal Peleg is a senior security researcher at Varonis. Also known as TLP, Tal is a full-stack hacker with experience in malware analysis, Windows domains, web servers, and cloud. His research is currently focused on cloud applications and APIs. Nitay is a security researcher based in Tel Aviv, but you might encounter him anywhere in world. He is a cloud security expert, highly experienced in offensive security operations and reverse engineering. Nitay’s expertise also includes IoT devices, Linux, and local network security.

{"ab":false,"abStatus":null,"abTestId":null,"abVariation":false,"abVariationAutomated":false,"absoluteUrl":"https://www.varonis.com/blog/author/tal-peleg-and-nitay-bachrach","aifeatures":null,"allowedSlugConflict":false,"analyticsPageId":"78732786528","analyticsPageType":"listing-page","approvalStatus":null,"archived":false,"archivedAt":0,"archivedInDashboard":false,"attachedStylesheets":[],"audienceAccess":"PUBLIC","author":null,"authorName":null,"authorUsername":null,"blueprintTypeId":0,"businessUnitId":0,"campaign":null,"campaignName":null,"campaignUtm":null,"category":7,"categoryId":7,"cdnPurgeEmbargoTime":null,"clonedFrom":null,"composeBody":null,"contentAccessRuleIds":[],"contentAccessRuleTypes":[],"contentGroupId":740355147,"contentTypeCategory":7,"contentTypeCategoryId":7,"contentTypeId":null,"created":1657333000175,"createdByAgent":null,"createdById":43917559,"createdTime":1657333000175,"crmObjectId":139248333332,"css":{},"cssText":"","ctaClicks":null,"ctaViews":null,"currentState":"PUBLISHED","currentlyPublished":true,"deletedAt":0,"deletedBy":null,"deletedByEmail":null,"deletedById":null,"domain":"www.varonis.com","dynamicPageDataSourceId":null,"dynamicPageDataSourceType":null,"dynamicPageHubDbTableId":null,"enableDomainStylesheets":null,"enableLayoutStylesheets":null,"errors":[],"featuredImage":"","featuredImageAltText":"","featuredImageHeight":0,"featuredImageLength":0,"featuredImageWidth":0,"flexAreas":{},"folderId":null,"footerHtml":"<script>\n // Removes old CTA forms \n document.querySelectorAll(\".code-block\").forEach(c => {c.remove()});\n</script>","freezeDate":1657333000000,"hasContentAccessRules":false,"hasUserChanges":true,"headHtml":"<style>\n \n /* Removes disc background image from CTA forms li inserted by Hubspot */\n.blog-post__content ul li.hs-form-booleancheckbox {\n background-image: none !important;\n padding-left: 0px !important;\n}\n\n.hs-form-field > ul > li {\n background-image: none !important;\n padding-left: 0px !important;\n}\n \n</style>","header":null,"htmlTitle":"Varonis Blog | All Things Data Security | Tal Peleg and Nitay Bachrach","id":78732786528,"includeDefaultCustomCss":null,"isDraft":true,"isInstanceLayoutPage":false,"isPublished":true,"label":"<span id=\"hs_cos_wrapper_name\" class=\"hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_text\" style=\"\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"text\" >Blog List | Resources Page</span>","language":"en","lastEditSessionId":null,"lastEditUpdateId":null,"layoutSections":{},"legacyBlogTabid":null,"legacyId":null,"legacyPostGuid":null,"linkRelCanonicalUrl":"","liveDomain":"www.varonis.com","mab":false,"mabExperimentId":null,"mabMaster":false,"mabVariant":false,"meta":{"meta_description":"Tal Peleg is a senior security researcher at Varonis. Also known as TLP, Tal is a full-stack hacker with experience in malware analysis, Windows domains, web servers, and cloud. His research is currently focused on cloud applications and APIs. Nitay is a security researcher based in Tel Aviv, but you might encounter him anywhere in world. He is a cloud security expert, highly experienced in offensive security operations and reverse engineering. Nitay’s expertise also includes IoT devices, Linux, and local network security.","meta_keywords":"","html_title":"Varonis Blog | All Things Data Security | Tal Peleg and Nitay Bachrach","public_access_rules":[],"public_access_rules_enabled":false,"layout_sections":{},"past_mab_experiment_ids":[],"deleted_by":null,"featured_image_alt_text":"","enable_layout_stylesheets":null,"tweet":null,"tweet_at":null,"campaign_name":null,"campaign_utm":null,"tweet_immediately":false,"publish_immediately":true,"security_state":"NONE","placement_guids":[],"property_for_dynamic_page_title":null,"property_for_dynamic_page_slug":null,"property_for_dynamic_page_meta_description":null,"property_for_dynamic_page_featured_image":null,"property_for_dynamic_page_canonical_url":null,"preview_image_src":null,"legacy_blog_tabid":null,"legacy_post_guid":null,"performable_variation_letter":null,"style_override_id":null,"has_user_changes":true,"css":{},"css_text":"","unpublished_at":0,"published_by_id":51871591,"allowed_slug_conflict":false,"ai_features":null,"link_rel_canonical_url":"","page_redirected":false,"page_expiry_enabled":null,"page_expiry_date":null,"page_expiry_redirect_id":null,"page_expiry_redirect_url":null,"deleted_by_id":null,"state_when_deleted":null,"cloned_from":null,"staged_from":null,"personas":[],"compose_body":null,"featured_image":"","use_featured_image":false,"featured_image_width":0,"featured_image_height":0,"publish_timezone_offset":null,"theme_settings_values":null,"created_by_agent":null,"header":null,"password":null,"published_at":1742837201941,"head_html":"<style>\n \n /* Removes disc background image from CTA forms li inserted by Hubspot */\n.blog-post__content ul li.hs-form-booleancheckbox {\n background-image: none !important;\n padding-left: 0px !important;\n}\n\n.hs-form-field > ul > li {\n background-image: none !important;\n padding-left: 0px !important;\n}\n \n</style>","footer_html":"<script>\n // Removes old CTA forms \n document.querySelectorAll(\".code-block\").forEach(c => {c.remove()});\n</script>","attached_stylesheets":[],"enable_domain_stylesheets":null,"include_default_custom_css":null,"last_edit_session_id":null,"last_edit_update_id":null},"metaDescription":"Tal Peleg is a senior security researcher at Varonis. Also known as TLP, Tal is a full-stack hacker with experience in malware analysis, Windows domains, web servers, and cloud. His research is currently focused on cloud applications and APIs. Nitay is a security researcher based in Tel Aviv, but you might encounter him anywhere in world. He is a cloud security expert, highly experienced in offensive security operations and reverse engineering. Nitay’s expertise also includes IoT devices, Linux, and local network security.","metaKeywords":"","name":"<span id=\"hs_cos_wrapper_name\" class=\"hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_text\" style=\"\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"text\" >Blog List | Resources Page</span>","pageExpiryDate":null,"pageExpiryEnabled":null,"pageExpiryRedirectId":null,"pageExpiryRedirectUrl":null,"pageRedirected":false,"pageTitle":"Varonis Blog | All Things Data Security | Tal Peleg and Nitay Bachrach","parentBlog":{"absoluteUrl":"https://www.varonis.com/blog","allowComments":false,"ampBodyColor":"#404040","ampBodyFont":"'Helvetica Neue', Helvetica, Arial, sans-serif","ampBodyFontSize":"18","ampCustomCss":"","ampHeaderBackgroundColor":"#ffffff","ampHeaderColor":"#1e1e1e","ampHeaderFont":"'Helvetica Neue', Helvetica, Arial, sans-serif","ampHeaderFontSize":"36","ampLinkColor":"#416bb3","ampLogoAlt":"","ampLogoHeight":0,"ampLogoSrc":"","ampLogoWidth":0,"analyticsPageId":740355147,"attachedStylesheets":[],"audienceAccess":"PUBLIC","businessUnitId":null,"captchaAfterDays":7,"captchaAlways":false,"categoryId":3,"cdnPurgeEmbargoTime":null,"closeCommentsOlder":0,"commentDateFormat":"medium","commentFormGuid":"24377743-8c7c-4452-946d-5731f7d98ae8","commentMaxThreadDepth":3,"commentModeration":false,"commentNotificationEmails":[],"commentShouldCreateContact":true,"commentVerificationText":"","cosObjectType":"BLOG","created":1399403353000,"createdDateTime":1399403353000,"dailyNotificationEmailId":"742284640","dateFormattingLanguage":"en_US","defaultGroupStyleId":"","defaultNotificationFromName":"Sample Author","defaultNotificationReplyTo":"SampleAuthor@hubspot.com","deletedAt":0,"description":"Insights and analysis on cybersecurity from the leaders in data security.","domain":"www.varonis.com","domainWhenPublished":"www.varonis.com","emailApiSubscriptionId":11752255,"enableGoogleAmpOutput":false,"enableSocialAutoPublishing":true,"generateJsonLdEnabled":true,"header":null,"htmlFooter":"<script>\n // Removes old CTA forms \n document.querySelectorAll(\".code-block\").forEach(c => {c.remove()});\n</script>","htmlFooterIsShared":true,"htmlHead":"<style>\n \n /* Removes disc background image from CTA forms li inserted by Hubspot */\n.blog-post__content ul li.hs-form-booleancheckbox {\n background-image: none !important;\n padding-left: 0px !important;\n}\n\n.hs-form-field > ul > li {\n background-image: none !important;\n padding-left: 0px !important;\n}\n \n</style>","htmlHeadIsShared":true,"htmlKeywords":[],"htmlTitle":"Varonis Blog | All Things Data Security","id":740355147,"ilsSubscriptionListsByType":{"daily":14125,"instant":14124,"monthly":14123,"weekly":14126},"instantNotificationEmailId":null,"itemLayoutId":null,"itemTemplateIsShared":false,"itemTemplatePath":"hook-www-varonis/templates/Blog/Blog Post 2024.html","label":"Varonis Blog","language":"en","legacyGuid":null,"legacyModuleId":null,"legacyTabId":null,"listingLayoutId":null,"listingPageId":78732786528,"listingTemplatePath":"hook-www-varonis/templates/blog-index.html","liveDomain":"www.varonis.com","monthFilterFormat":"MMMM yyyy","monthlyNotificationEmailId":"742284450","name":"Varonis Blog","parentBlogUpdateTaskId":null,"portalId":142972,"postHtmlFooter":"<script>\n // Removes old CTA forms \n document.querySelectorAll(\".code-block\").forEach(c => {c.remove()});\n</script>","postHtmlHead":"<style>\n \n /* Removes disc background image from CTA forms li inserted by Hubspot */\n.blog-post__content ul li.hs-form-booleancheckbox {\n background-image: none !important;\n padding-left: 0px !important;\n}\n\n.hs-form-field > ul > li {\n background-image: none !important;\n padding-left: 0px !important;\n}\n \n</style>","postsPerListingPage":12,"postsPerRssFeed":10,"publicAccessRules":[],"publicAccessRulesEnabled":false,"publicTitle":"Varonis Blog","publishDateFormat":"medium","resolvedDomain":"www.varonis.com","rootUrl":"https://www.varonis.com/blog","rssCustomFeed":null,"rssDescription":null,"rssItemFooter":null,"rssItemHeader":null,"settingsOverrides":{"itemLayoutId":false,"itemTemplatePath":false,"itemTemplateIsShared":false,"listingLayoutId":false,"listingTemplatePath":false,"postsPerListingPage":false,"showSummaryInListing":false,"useFeaturedImageInSummary":false,"htmlHead":false,"postHtmlHead":false,"htmlHeadIsShared":false,"htmlFooter":false,"listingPageHtmlFooter":false,"postHtmlFooter":false,"htmlFooterIsShared":false,"attachedStylesheets":false,"postsPerRssFeed":false,"showSummaryInRss":false,"showSummaryInEmails":false,"showSummariesInEmails":false,"allowComments":false,"commentShouldCreateContact":false,"commentModeration":false,"closeCommentsOlder":false,"commentNotificationEmails":false,"commentMaxThreadDepth":false,"commentVerificationText":false,"socialAccountTwitter":false,"showSocialLinkTwitter":false,"showSocialLinkLinkedin":false,"showSocialLinkFacebook":false,"enableGoogleAmpOutput":false,"ampLogoSrc":false,"ampLogoHeight":false,"ampLogoWidth":false,"ampLogoAlt":false,"ampHeaderFont":false,"ampHeaderFontSize":false,"ampHeaderColor":false,"ampHeaderBackgroundColor":false,"ampBodyFont":false,"ampBodyFontSize":false,"ampBodyColor":false,"ampLinkColor":false,"generateJsonLdEnabled":false},"showSocialLinkFacebook":true,"showSocialLinkLinkedin":true,"showSocialLinkTwitter":true,"showSummaryInEmails":true,"showSummaryInListing":true,"showSummaryInRss":false,"siteId":0,"slug":"blog","socialAccountTwitter":"","state":null,"subscriptionContactsProperty":"blog_default_hubspot_blog_subscription","subscriptionEmailType":null,"subscriptionFormGuid":"395211c6-1953-4516-a8ba-0aeea0d8e5f1","subscriptionListsByType":{"daily":4086,"instant":4085,"monthly":4084,"weekly":4087},"title":null,"translatedFromId":null,"translations":{},"updated":1726922030809,"updatedDateTime":1726922030809,"urlBase":"www.varonis.com/blog","urlSegments":{"all":"all","archive":"archive","author":"author","page":"page","tag":"tag"},"useFeaturedImageInSummary":true,"usesDefaultTemplate":false,"weeklyNotificationEmailId":"742284775"},"password":null,"pastMabExperimentIds":[],"performableGuid":null,"performableVariationLetter":null,"personas":[],"placementGuids":[],"portableKey":null,"portalId":142972,"position":null,"previewImageSrc":null,"previewKey":"dOKqweBc","processingStatus":"PUBLISHED","propertyForDynamicPageCanonicalUrl":null,"propertyForDynamicPageFeaturedImage":null,"propertyForDynamicPageMetaDescription":null,"propertyForDynamicPageSlug":null,"propertyForDynamicPageTitle":null,"publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1657333000000,"publishDateLocalTime":1657333000000,"publishImmediately":true,"publishTimezoneOffset":null,"publishedAt":1742837201941,"publishedByEmail":null,"publishedById":51871591,"publishedByName":null,"publishedUrl":"https://www.varonis.com/blog/author/tal-peleg-and-nitay-bachrach","resolvedDomain":"www.varonis.com","resolvedLanguage":null,"scheduledUpdateDate":null,"screenshotPreviewTakenAt":1742837200867,"screenshotPreviewUrl":"https://cdn1.hubspot.net/hubshotv3/prod/e/0/19b465a7-6cbd-488a-a0c8-2418845c7ce2.png","sections":{},"securityState":"NONE","siteId":null,"slug":"blog","stagedFrom":null,"state":"PUBLISHED","stateWhenDeleted":null,"structuredContentPageType":null,"structuredContentType":null,"styleOverrideId":null,"subcategory":"","teamPerms":[],"templatePath":"hook-www-varonis/templates/Blog/Blog 2025/Blog Listing 2025.html","templatePathForRender":"hook-www-varonis/templates/Blog/Blog 2025/Blog Listing 2025.html","textToAudioFileId":null,"textToAudioGenerationRequestId":null,"themePath":null,"themeSettingsValues":null,"title":"Varonis Blog | All Things Data Security | Tal Peleg and Nitay Bachrach","tmsId":null,"translatedContent":{"de":{"ab":false,"absoluteUrl":"https://www.varonis.com/de/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1657333002248,"currentState":"PUBLISHED","htmlTitle":"Der Inside-Out-Sicherheits Blog - Der Inside-Out-Sicherheits Blog","id":78742257820,"language":"de","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"lYoVOUNi","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1657333002000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"de/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741129209927,"updatedById":72684387},"es":{"ab":false,"absoluteUrl":"https://www.varonis.com/es/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1705501095283,"currentState":"PUBLISHED","htmlTitle":"Inside Out Security - Inside Out Security","id":153358801079,"language":"es","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"nezJNxRN","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1705501095000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"es/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741211592359,"updatedById":72684387},"fr":{"ab":false,"absoluteUrl":"https://www.varonis.com/fr/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1657333002248,"currentState":"PUBLISHED","htmlTitle":"Inside Out - Blog CyberSécurité","id":78742257819,"language":"fr","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"TLXDXOzG","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1657333002000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"fr/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741129252282,"updatedById":72684387},"it":{"ab":false,"absoluteUrl":"https://www.varonis.com/it/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1678713445120,"currentState":"PUBLISHED","htmlTitle":"Inside Out Security - Inside Out Security","id":106294733725,"language":"it","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"qdjzgqOp","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1678713445000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"it/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741211235760,"updatedById":72684387},"pt-br":{"ab":false,"absoluteUrl":"https://www.varonis.com/pt-br/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1657333002248,"currentState":"PUBLISHED","htmlTitle":"Varonis | Segurança de dentro para fora","id":78742257821,"language":"pt-br","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"hEHPUNDO","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1657333002000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"pt-br/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741211197951,"updatedById":72684387},"ru":{"ab":false,"absoluteUrl":"https://www.varonis.com/ru/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1657333002248,"currentState":"PUBLISHED","htmlTitle":"Inside Out Blog - Inside Out Security","id":78742257818,"language":"ru","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"TCZishRR","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1657333002000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"ru/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1739392257529,"updatedById":27184262}},"translatedFromId":null,"translations":{"de":{"ab":false,"absoluteUrl":"https://www.varonis.com/de/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1657333002248,"currentState":"PUBLISHED","htmlTitle":"Der Inside-Out-Sicherheits Blog - Der Inside-Out-Sicherheits Blog","id":78742257820,"language":"de","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"lYoVOUNi","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1657333002000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"de/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741129209927,"updatedById":72684387},"es":{"ab":false,"absoluteUrl":"https://www.varonis.com/es/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1705501095283,"currentState":"PUBLISHED","htmlTitle":"Inside Out Security - Inside Out Security","id":153358801079,"language":"es","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"nezJNxRN","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1705501095000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"es/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741211592359,"updatedById":72684387},"fr":{"ab":false,"absoluteUrl":"https://www.varonis.com/fr/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1657333002248,"currentState":"PUBLISHED","htmlTitle":"Inside Out - Blog CyberSécurité","id":78742257819,"language":"fr","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"TLXDXOzG","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1657333002000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"fr/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741129252282,"updatedById":72684387},"it":{"ab":false,"absoluteUrl":"https://www.varonis.com/it/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1678713445120,"currentState":"PUBLISHED","htmlTitle":"Inside Out Security - Inside Out Security","id":106294733725,"language":"it","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"qdjzgqOp","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1678713445000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"it/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741211235760,"updatedById":72684387},"pt-br":{"ab":false,"absoluteUrl":"https://www.varonis.com/pt-br/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1657333002248,"currentState":"PUBLISHED","htmlTitle":"Varonis | Segurança de dentro para fora","id":78742257821,"language":"pt-br","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"hEHPUNDO","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1657333002000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"pt-br/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1741211197951,"updatedById":72684387},"ru":{"ab":false,"absoluteUrl":"https://www.varonis.com/ru/blog","approvalStatus":null,"archived":false,"archivedInDashboard":false,"audienceAccess":"PUBLIC","authorName":null,"businessUnitId":0,"campaign":null,"campaignName":null,"created":1657333002248,"currentState":"PUBLISHED","htmlTitle":"Inside Out Blog - Inside Out Security","id":78742257818,"language":"ru","mab":false,"masterId":78732786528,"name":"Varonis Blog listing page","password":null,"previewKey":"TCZishRR","publicAccessRules":[],"publicAccessRulesEnabled":false,"publishDate":1657333002000,"published":true,"resolvedDomain":"www.varonis.com","securityState":"NONE","slug":"ru/blog","state":"PUBLISHED","teamPerms":[],"themePath":null,"updated":1739392257529,"updatedById":27184262}},"tweet":null,"tweetAt":null,"tweetImmediately":false,"unpublishedAt":0,"updated":1742837201945,"updatedById":51871591,"upsizeFeaturedImage":false,"url":"https://www.varonis.com/blog/author/tal-peleg-and-nitay-bachrach","useFeaturedImage":false,"userPerms":[],"views":null,"visibleToAll":null,"widgetContainers":{},"widgetcontainers":{},"widgets":{"module_167763220375310":{"body":{"categories_shown_desktop":8,"category_selector":[{"id":44911454985,"name":"Data Security","slug":"data-security"},{"id":55386123806,"name":"Threat Research","slug":"threat-research"},{"id":58650816317,"name":"Varonis Products","slug":"varonis-products"},{"id":58650816127,"name":"Cloud Security","slug":"cloud-security"},{"id":78875983451,"name":"Ransomware","slug":"ransomware"},{"id":58420140211,"name":"Active Directory","slug":"active-directory"},{"id":44911454983,"name":"Privacy & Compliance","slug":"privacy-compliance"}],"module_id":104551086851},"child_css":{},"css":{},"deleted_at":1710542880472,"id":"module_167763220375310","label":"Blog Nav Category Selector","module_id":104551086851,"name":"module_167763220375310","order":5,"styles":{},"type":"module"},"module_168055221454942":{"body":{"ctas":[{"cta_link":{"no_follow":false,"open_in_new_tab":true,"url":{"href":"https://info.varonis.com/en/demo-request","type":"EXTERNAL"}},"cta_style":"primary-red","cta_text":"Learn more"}],"heading_text":"<div style=\"text-align: center;\"><span>We're Varonis.</span></div>","module_id":105667784581,"subheading_text":"<div style=\"text-align: center;\"><span>Our mission is to deliver meaningful security outcomes on autopilot.<br>No overhead. Just outcomes.  </span></div>"},"child_css":{},"css":{},"deleted_at":1710453760897,"id":"module_168055221454942","label":"Conversion Panel - Text","module_id":105667784581,"name":"module_168055221454942","order":18,"styles":{},"type":"module"},"module_16982742706536":{"body":{"large_footer":true,"large_header":true,"show_submenu_anchor_bar":true,"simple_footer":false},"child_css":{},"css":{},"id":"module_16982742706536","name":"module_16982742706536","order":0,"smart_type":null,"styles":{},"type":"module"},"module_17102796944486":{"body":{"category_selector":[{"id":44911454985,"name":"Data Security","slug":"data-security"},{"id":55386123806,"name":"Threat Research","slug":"threat-research"},{"id":58650816317,"name":"Varonis Products","slug":"varonis-products"},{"id":58650816127,"name":"Cloud Security","slug":"cloud-security"},{"id":49037902755,"name":"Ransomware","slug":"ransomware"},{"id":156144622767,"name":"Active Directory","slug":"active-directory"},{"id":44911454983,"name":"Privacy & Compliance","slug":"privacy-compliance"}],"module_id":160491163207},"child_css":{},"css":{},"deleted_at":1710776042335,"id":"module_17102796944486","label":"Blog Category Anchor Bar","module_id":160491163207,"name":"module_17102796944486","order":5,"smart_type":null,"styles":{},"type":"module"},"module_171745782527362":{"body":{"subnav_items":[{"anchor_label":"Blog","anchor_link":{"no_follow":false,"open_in_new_tab":false,"url":{"content_id":740355147,"href":null,"type":"BLOG"}},"featured_item":true,"shield_icon":false},{"anchor_label":"State of Cybercrime","anchor_link":{"no_follow":false,"open_in_new_tab":false,"url":{"content_id":176796927251,"href":null,"type":"CONTENT"}},"featured_item":false,"shield_icon":false},{"anchor_label":"Speed Data","anchor_link":{"no_follow":false,"open_in_new_tab":false,"url":{"content_id":175722928259,"href":null,"type":"CONTENT"}},"featured_item":false,"shield_icon":false},{"anchor_label":"Webinars","anchor_link":{"no_follow":false,"open_in_new_tab":false,"url":{"content_id":59117798793,"href":null,"type":"CONTENT"}},"featured_item":false,"shield_icon":false},{"anchor_label":"Events","anchor_link":{"no_follow":false,"open_in_new_tab":false,"url":{"content_id":60720681236,"href":null,"type":"CONTENT"}},"featured_item":false,"shield_icon":false},{"anchor_label":"Content Library","anchor_link":{"no_follow":false,"open_in_new_tab":false,"url":{"content_id":182154148710,"href":null,"type":"CONTENT"}},"featured_item":false,"shield_icon":false},{"anchor_label":"Threat Labs","anchor_link":{"no_follow":false,"open_in_new_tab":false,"url":{"content_id":null,"href":"https://www.varonis.com/blog/tag/threat-research?hsLang=en","type":"EXTERNAL"}},"featured_item":false,"shield_icon":false}]},"child_css":{},"css":{},"id":"module_171745782527362","name":"module_171745782527362","order":3,"smart_type":null,"styles":{},"type":"module"},"module_173318478509923":{"body":{"form":{"form_id":"2f386533-7b68-4d50-82c7-8f46eb2a8c05","form_type":"HUBSPOT","gotowebinar_webinar_key":null,"message":"Thanks for subscribing!","response_type":"inline","webinar_id":null,"webinar_source":null},"module_id":183282482752,"section_options":{"blog_grid":true,"bottom_padding":"half-padding-bottom","color":"green-theme","top_padding":"half-padding-top"},"subheading":"<span>Join 400K+ security pros. Get threat research and cybercrime news sent right to your inbox.</span><br><br><span id=\"okta-plugin-message-channel-available\" style=\"display: none;\"></span>"},"child_css":{},"css":{},"id":"module_173318478509923","label":"Contained Conversion Panel","module_id":183282482752,"name":"module_173318478509923","order":7,"smart_type":null,"styles":{},"type":"module"},"module_173318486557428":{"body":{"asset":{"image":{"src":""},"video_id":"fzb4szxb0u"},"call_to_actions":[{"button_size":"button-defaults","button_style":"primary-blue","cta_label":"Get a demo","end_icon":"button-end-arrow","link_field":{"no_follow":false,"open_in_new_tab":false,"url":{"content_id":152504231711,"href":null,"type":"CONTENT"}},"start_icon":""}],"carousel_slides":[{"author":"Michael Smith, CISO, HKS","quote":"“I was amazed by how quickly Varonis was able to classify data and uncover potential data exposures during the free assessment. It was truly eye-opening.”"},{"author":"Deborah Haworth, Director of Information Security, Penguin Random House","quote":"\"What I like about Varonis is that they come from a data-centric place. Other products protect the infrastructure, but they do nothing to protect your most precious commodity — your data.\""},{"author":"Al Faella, CTO, Prospect Capital","quote":"“Varonis’ support is unprecedented, and their team continues to evolve and improve their products to align with the rapid pace of industry evolution.”"}],"module_id":149192873769,"secondary_heading":"","subheading":""},"child_css":{},"css":{},"id":"module_173318486557428","label":"Standard Conversion Panel","module_id":149192873769,"name":"module_173318486557428","order":9,"smart_type":null,"styles":{},"type":"module"},"module_17359269431317":{"body":{"module_id":183204347146,"resource_tabs":[{"cards":[{"card_link":{"no_follow":false,"open_in_new_tab":true,"url":{"content_id":null,"href":"https://info.varonis.com/hubfs/AWS%20Best%20Practices%20Playbook%20-%20Webinar%20Asset.pdf","type":"FILE"}},"eyebrow":"Guide","title":"AWS Best Practices Guide"},{"card_link":{"no_follow":false,"open_in_new_tab":true,"url":{"content_id":null,"href":"https://info.varonis.com/hubfs/2024%20Content%20Downloads/Whitepaper_VTL-AttackersPlaybook_202407_FNL.pdf","type":"FILE"}},"eyebrow":"White Paper","title":"The Attacker's Playbook"},{"card_link":{"no_follow":false,"open_in_new_tab":true,"url":{"content_id":null,"href":"https://info.varonis.com/hubfs/DRA-sample.pdf","type":"FILE"}},"eyebrow":"Report","title":"Sample Data Risk Assessment"}],"tab_name":"Guides"},{"cards":[{"card_link":{"no_follow":false,"open_in_new_tab":true,"url":{"content_id":null,"href":"https://info.varonis.com/hubfs/Web%20Assets/Website_Reboot/Case_Studies/EN-Case-Studies/Case%20Study%20Bradshaw%20International.pdf","type":"FILE"}},"eyebrow":"Case Study","title":"How Bradshaw International Reined in Permissions and Reduced Their M365 Blast Radius With Varonis"},{"card_link":{"no_follow":false,"open_in_new_tab":true,"url":{"content_id":null,"href":"https://info.varonis.com/hubfs/Web%20Assets/Website_Reboot/Case_Studies/EN-Case-Studies/CaseStudy_Healthcare_Salesforce.pdf","type":"FILE"}},"eyebrow":"Case Study","title":"How a Healthcare Org Enhances its Salesforce Security Posture With Varonis"},{"card_link":{"no_follow":false,"open_in_new_tab":true,"url":{"content_id":null,"href":"https://info.varonis.com/hubfs/Web%20Assets/Website_Reboot/Case_Studies/EN-Case-Studies/Case-Study-Energy-Company.pdf","type":"FILE"}},"eyebrow":"Case Study","title":"How Varonis Helps an Energy Company Safeguard Critical Data in AWS and M365 "}],"tab_name":"Case Studies"},{"cards":[{"card_link":{"no_follow":false,"open_in_new_tab":true,"url":{"content_id":null,"href":"https://youtu.be/NxKBfhM8700?si=AcRKvuo5jlCXwUMT","type":"EXTERNAL"}},"eyebrow":"On-demand video","title":"State of Cybercrime:<br/>Salt Typhoon Telecom Attack"},{"card_link":{"no_follow":false,"open_in_new_tab":true,"url":{"content_id":null,"href":"https://youtu.be/VIrpgrpff-E?si=OIi1UUzyQe_8fgKF","type":"EXTERNAL"}},"eyebrow":"On-demand video","title":"State of Cybercrime:<br/>Midnight Blizzard"},{"card_link":{"no_follow":false,"open_in_new_tab":true,"url":{"content_id":null,"href":"https://youtu.be/3Z9GzX2fwFA?si=xuSesEmHaCVIbM0R","type":"EXTERNAL"}},"eyebrow":"On-demand video","title":"State of Cybercrime:<br/>ChatGPT Manipulation + More"}],"tab_name":"Videos"}],"section_options":{"theme":"gray-theme"}},"child_css":{},"css":{},"id":"module_17359269431317","label":"Tabbed Bar","module_id":183204347146,"name":"module_17359269431317","order":8,"smart_type":null,"styles":{},"type":"module"},"module_173827374697314":{"body":{"additional_blog_posts_group":[{"additional_blog_post":186818171995,"min_read":3},{"additional_blog_post":187009874031,"min_read":7},{"additional_blog_post":171506446362,"min_read":2}],"banner_blog_posts":[187452524680,187603959415,125164530048],"blog_listing_hero_heading":"Featured Content","featured_post":{"badge":"","featured_blog_post":187450388511,"featured_min_read":3},"module_id":182846879085},"child_css":{},"css":{},"id":"module_173827374697314","label":"Blog Listing Hero","module_id":182846879085,"name":"module_173827374697314","order":4,"smart_type":null,"styles":{},"type":"module"}}}

Showing 1 results

Threat Research

Jan 23, 2023

CrossTalk and Secret Agent: Two Attack Vectors on Okta's Identity Suite

Varonis Threat Labs discovered and disclosed two attack vectors on Okta's identity suite: CrossTalk and Secret Agent.

Tal Peleg and Nitay Bachrach

7 min read

SECURITY STACK NEWSLETTER

Join 400K+ security pros. Get threat research and cybercrime news sent right to your inbox.

Explore Additional Resources

Guide

AWS Best Practices Guide

White Paper

The Attacker's Playbook

Report

Sample Data Risk Assessment

Case Study

How Bradshaw International Reined in Permissions and Reduced Their M365 Blast Radius With Varonis

Case Study

How a Healthcare Org Enhances its Salesforce Security Posture With Varonis

Case Study

How Varonis Helps an Energy Company Safeguard Critical Data in AWS and M365

On-demand video

State of Cybercrime:
Salt Typhoon Telecom Attack

On-demand video

State of Cybercrime:
Midnight Blizzard

On-demand video

State of Cybercrime:
ChatGPT Manipulation + More

Ready to see the #1 Data Security Platform in action?

“I was amazed by how quickly Varonis was able to classify data and uncover potential data exposures during the free assessment. It was truly eye-opening.”

Michael Smith, CISO, HKS

"What I like about Varonis is that they come from a data-centric place. Other products protect the infrastructure, but they do nothing to protect your most precious commodity — your data."

Deborah Haworth, Director of Information Security, Penguin Random House

“Varonis’ support is unprecedented, and their team continues to evolve and improve their products to align with the rapid pace of industry evolution.”

Al Faella, CTO, Prospect Capital

Get a demo

CrossTalk and Secret Agent: Two Attack Vectors on Okta's Identity Suite

SECURITY STACK NEWSLETTER

Ready to see the #1 Data Security Platform in action?

Ready to see the #1 Data Security Platform in action?