Featured content

A small preview note can go here. Welcome to our new video interview series, Speed Data: Quick Conversations With Cybersecurity Leaders. Like speed dating, our goal is to capture the hearts of CISOs with intriguing, unique insight in a rapid format for security leaders pressed for time.

When Varonis began protecting enterprise data in 2005, the cloud was just starting to form. SaaS pioneers like Salesforce were delivering software over the internet, but the big cloud players didn’t even exist yet.

Across the globe, CL0P ransomware group is extorting hundreds of organizations — including federal government agencies — after exploiting a critical SQLi vulnerability in MOVEit Transfer, potentially leading to arbitrary remote code execution and unauthorized data access. New victims seem to emerge daily, with CL0P threatening to publish stolen data publicly if organizations don’t pay up.

As we wrap up June and officially enter into summertime, check out our cool new updates, bringing you more cloud security features to help you better govern your SaaS and IaaS security posture.

It can take hours of combing through Profiles, Permission Sets, Permission Set Groups, and more to understand a user’s rights in Salesforce (and how they got them). When your security team is fielding urgent requests for insight into what sensitive data employees who left to work for a competitor could have taken with them, time is of the essence.

Salesforce houses massive amounts of customer data, and protecting that data is at the core of business best practices. With personally identifiable information (PII), personal credit information (PCI), customer lists, and more stored in Salesforce, it’s never been more important to secure and classify your sensitive data.

Varonis Threat Labs discovered that improperly deactivated and unmaintained Salesforce "ghost sites” remain accessible and vulnerable to risk. By manipulating the host header, threat actors can gain access to sensitive PII and business data.

We’re excited to introduce our new video interview series, "Speed Data: Quick Conversations With Cybersecurity Leaders." Like speed dating, our goal is to capture the hearts of CISOs with intriguing, unique insight presented in a rapid format for security leaders pressed for time.

This month was chock-full of product updates! We shipped several new features to our SaaS Data Security Platform to help security teams automatically enforce least privilege and uniformly apply sensitivity labels across their hybrid cloud and on-prem environments.

Sometimes when I speak with organizations about sensitive data risk, I hear things like, “All of our data is sensitive,” or “We’re sure PII is only in X system.” But it’s not what you know that might be your biggest problem — it’s always what you don’t know.