Varonis Systems

It's a North Star goal for Microsoft for 2027.

A few weeks ago, back on the weekend show, we spoke with Marc Weitzman, AI threat research lead at Varonis, about why model guardrails just like this fail.

He and his team have demonstrated single-click exploit chains against Microsoft Copilot and an Atlassian Confluence attack dubbed RovoBlast, prompt injection that walks straight past built-in guardrails and exfiltrated data.

In the case of the Microsoft Copilot most recent hack, Cosnitch, they got the AI to tell them how to hack itself.

Aisle says the findings also demonstrate the advantages of specialized multi-model AI systems for vulnerability research.

Varonis Threat Labs has demonstrated a credential phishing technique called Trust Sync that turns Microsoft Entra's external authentication methods into a persistent password trap.

An attacker who has already compromised a global administrator or authentication policy administrator account can register a rogue authentication provider and insert a convincing Microsoft-style password prompt into the legitimate sign-in process.

The fake provider captures the user's password in plain text, then returns a valid signed token to Entra, allowing authentication to finish normally without raising an error.

Crucially, resetting the stolen password doesn't eliminate the threat.

The malicious provider remains registered and can capture the replacement password during the next login.

Varonis recommends monitoring changes to authentication policies, application registrations, service principals, and sign-in logs.

Defenders should remove the rogue provider and associated infrastructure before resetting affected credentials.

Well, with or without AI, a lack of pro- proper segmentation will get you every time.

Varonis disclosed a patched Microsoft 365 Copilot vulnerability chain combining automatic prompt execution, access to connected services, and persistent memory poisoning.

Now, what makes Coast Niche unique, according to the Varonis article linked in the show notes, is how Copilot surfaced its own vulnerabilities, a method they call meta hacking.

Rather than reverse engineer the flaw, the AI itself exposed the weakness during normal use, highlighting a meaningful shift in how security flaws are found and a preview of what's ahead as AI gets woven deeper into enterprise systems.

Now, with AI Copilots now at the center of enterprise environments, sensitive data shared via email, files, calendar, and chats is all accessible through a single assistant.

Welcome to the State of Cybercrime podcast.

I'm your host, Matt Radulak from Varonis.

The following podcast has been adapted from a live show.

Check out our YouTube channel for the full video and sign up on our website to be notified of upcoming live events.

Failed hard.

Fortinet, Checkpoint, Qualys, Tenable, Varonis, all hit with downgrades.

Oh, man.

Even with decent charts? Even with decent charts.

So it did have a negative in its performance.

The best performing was Fastly, Varonis.

Yeah.

Which is

I love it, baby.

All right, Varonis.

We got bonus.

We got bonus Varonis there.

I like it.

So, Varonis, you're going to tell us who's going to be the best third year or younger player on the field on Sunday.

One player, this applies to both teams.

There's a treasure chest of talent there, right? With Brock Bowers and Ashton Jensey and Patrick Paul and Caden Proctor and Chris Johnson and Chris Bale, Caleb Douglas, Shop Robinson.