Top all-time · #2897
Varonis Blog
Company blog · varonis.com/blogsecuritydata
Varonis Blog is the company blog at varonis.com, writing about security and data. Since 2013, 27 different Hacker News readers have linked it 51 times, most often “The Single-Click Microsoft Copilot Attack That Silently Steals Personal Data”. It is still writing: the last post was on 2026-10-26, and you can follow it by feed.
Too few sampled comments (23) to say how often HN recommends it.?
Why HN links it
HN commenters mostly link Varonis Blog posts as sources on GDPR, ransomware, SMB vs CIFS, ITAR, and cybersecurity statistics. A few point to its free learning courses on ransomware and web security.
Summarised by Claude from a sample of 23 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The leading data and AI security platform that proactively reduces risk, enforces policies, and stops active threats with our AI-native automation.
Most-linked posts?
- The Single-Click Microsoft Copilot Attack That Silently Steals Personal Data2 people · 2 mentions · first linked 2026-01-14
- /blog/cifs-vs-smb/2 people · 2 mentions · first linked 2021-08-30
- Burning Data with Malicious Firewall Rules in Azure SQL Server2 people · 2 mentions · first linked 2025-04-15
What Hacker News says?
This is in part what the GDPR mandates - that companies provide reasoning for how an automatic process works and also that there is a means to dispute that (Section 4 / Article 22) https://www.varonis.com/blog/gdpr-requirements-list-in-plain...
Comment linking /blog/gdpr-requirements-list-in-plain-english/
on “Terraria on Stadia cancelled after developer's Google account gets locked”Submitted Learn Web Security Fundamentals as a story · 5 points
HN discussionI wouldn't say easily over 50%. For example https://www.varonis.com/blog/inside-world-insider-threats-pa... says roughly about half, and that sample might be biased as i assume its easier to take someone to court if they did it for money. Still your point stands that money is a common factor. However you still have the problem that bribes usually aren't a one time payment but an ongoing thing, so a purely financiall…
Comment linking /blog/inside-world-insider-threats-part-motivation
on “Hackers claim to have breached Okta systems”Submitted The Single-Click Microsoft Copilot Attack That Silently Steals Personal Data as a story · 4 points
HN discussionThe security of GCP rests on the security of Google. If Google gets hacked, GCP customers are not secure. Additionally: Google offers BeyondCorp products as GCP products. A big example is IAP. Do AWS and Azure offer something like IAP? If so, I think they were created in response to IAP. Another Google/GCP security product related to zero trust is Chrome Enterprise Premium: https://cloud.google.com/blog/products/ide…
Comment linking /blog/forrester-wave-data-security-platforms-2025
on “Google to buy Wiz for $32B”Submitted GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security as a story · 3 points
HN discussionThe guy that made HaveIBeenPwned.com (which I'd urge everybody to use) has a solid free course on Ransomware essentials at: https://www.varonis.com/learn/introduction-to-ransomware/ It's not the ideal thing for people here on HN, but it's pretty much the ideal thing to send to your non/semi-technical boss or stakeholder at your company who isn't taking ransomware seriously.
Comment linking /learn/introduction-to-ransomware/
on “The No More Ransom Project”Submitted Burning Data with Malicious Firewall Rules in Azure SQL Server as a story · 3 points
HN discussionI would recommend reading up on the basics here: https://www.crowdstrike.com/en-us/cybersecurity-101/cyberatt... https://www.varonis.com/blog/what-is-c2
Comment linking /blog/what-is-c2
on “LG says we're fake news [video]”Submitted The Logging Dead: Two Event Log Vulnerabilities Haunting Windows as a story · 3 points
HN discussionBy default, it uses objects (structured data) instead of plain strings. I'm also not extremely familiar with the concept, so at the moment, I'm reading this document to understand it better https://www.varonis.com/blog/how-to-use-powershell-objects-a...
Comment linking /blog/how-to-use-powershell-objects-and-data-piping/
on “Terminal escape sequences in Git commit email field”Submitted Bypassing Box's SMS-Based MFA as a story · 3 points
HN discussionThat’s partially due to SF devs not knowing enough about the product but also due to Salesforce treating security as an afterthought. For a poorly configured implementation it takes 2 web requests as an unauthenticated user to know all of the data you can pull down and then do it. Don’t even get me started on the complete lack of monitoring. I basically had to design an entire security monitoring setup outside of Sa…
Comment linking /blog/misconfigured-salesforce-experi
on “Allianz Life says 'majority' of customers' personal data stolen in cyberattack”Submitted New strain of Qbot banking malware actively compromised thousands of victims as a story · 3 points
HN discussionTroy has a good Web Security course up for free at: https://www.varonis.com/learn/web-security-fundamentals/
Comment linking /learn/web-security-fundamentals/
on “Have I Been Pwned? Data breach master list with API”Submitted OpenClaw agent leaked mock AWS keys and CRM data in phishing tests as a story · 2 points
HN discussion> Another take is that DESPITE there being a lot of 'amateurs' in the industry, the world generally seems to be humming along as normal, if not doing very well. Given that the count of software security incidents and data breaches are skyrocketing by all measures (e.g. https://www.varonis.com/blog/cybersecurity-statistics/ ), that's not remotely a reasonable view to take.
Comment linking /blog/cybersecurity-statistics/
on “The memory safety problem isn't bad coders”Submitted CrossTalk and Secret Agent: Two Attack Vectors on Okta's Identity Suite as a story · 2 points
HN discussionFor those who don’t know: ITAR is International Traffic in Arms Regulation. https://www.varonis.com/blog/itar-compliance/
Comment linking /blog/itar-compliance/
on “A phone the FBI sold to criminals”Submitted URL Spoofing in Box, Google, and Zoom as a story · 2 points
HN discussionBefore cryptocurrency you had to buy things from shady online pharmacies or send/fund Visa gift cards. Source: https://www.varonis.com/blog/a-brief-history-of-ransomware/ Crypto is really what's made ransomware at the scale we see it now possible.
Comment linking /blog/a-brief-history-of-ransomware/
on “Massachusetts Steamship Authority hit by ransomware attack; ferries delayed”Submitted Bypassing Box's one-time password MFA as a story · 2 points
HN discussionAnother good page with stats [1] including this: $63 million in fines issued $57 million of that issued to Google [1] https://www.varonis.com/blog/gdpr-effect-review/
Comment linking /blog/gdpr-effect-review/
on “Two years in, GDPR defined by mixed signals, unbalanced enforcement”Submitted Salesforce bug exposes Outlook/Gmail calendars as a story · 2 points
HN discussionThere is absolutely a technical difference, but in 2021 it has become a bit like kleenex. SMB/CIFS are used interchangeably by most folks. CIFS was the specific Microsoft implementation of the original SMB protocol. https://www.varonis.com/blog/cifs-vs-smb/
Comment linking /blog/cifs-vs-smb/
on “New smb3 kernel server (ksmbd)”Submitted BlackMatter Ransomware as a story · 2 points
HN discussionI thought the same thing when I saw both names mentioned. My understanding is CIFS is an older dialect of SMB that some servers/clients can still fall back on. Here's some key text from an article on the subject [0]: > Most people, when they use either SMB or CIFS, are talking about the same exact thing. The two are interchangeable not only in a discussion but also in application – i.e., a client speaking CIFS can t…
Comment linking /blog/cifs-vs-smb/
on “New smb3 kernel server (ksmbd)”Submitted PowerShell Obfuscation: Stealth Through Confusion as a story · 2 points
HN discussionGroup policy just sets registry keys. That's nothing you can't do any other way. The important bit is the inertia of 30 years of Windows subsystems and integration with Active Directory and 3rd party Windows ecosystem software all being written to expose internal config and look to registry keys for the settings. For the first part, Group Policy (GPO) can set the screen to lock after 2 minutes of inactivity, say, wh…
Comment linking /hs-fs/hubfs/blog%20posts/Group%20Policy%20Best%20Practices/gpo_linking.png
on “France Launches Government Linux Desktop Plan as Windows Exit Begins”Submitted What Working in Cybersecurity Is Like: A Day in the Life as a story · 2 points
HN discussion
