Varonis Heads to Black Hat USA 2026 and DEF CON 34

Rhea-AI Summary

Varonis (Nasdaq: VRNS) will showcase its data and AI security solutions at Black Hat USA 2026 and DEF CON 34 in Las Vegas this August. The company will feature AI security demos and Varonis Threat Labs research at Booth #2948 and in DEF CON’s Cloud Village.

Highlights include the online and in-person capture-the-flag challenge Breach at the Beach, expert sessions on AI-native attacks, AI vulnerabilities, autonomous AI agent risks, and hands-on labs covering Microsoft 365 Copilot, AWS Bedrock, and GCP Dataflow attack techniques.

Market Context

Historical event 1079397 recorded -1.68%, while event 1081487 recorded 6.19%, showing varied respons...

Analysis

Historical event 1079397 recorded -1.68%, while event 1081487 recorded 6.19%, showing varied responses to AI-security announcements. Low short positioning is an additional, separately sourced volatility consideration.

Key Figures

Black Hat booth: #2948 DEF CON edition: 34 CTF stages: four stages +4 more

7 metrics

Black Hat booth #2948 Black Hat USA 2026

DEF CON edition 34 DEF CON 34

CTF stages four stages Breach at the Beach

Expert session time August 5 at 10:50 am Black Hat USA 2026

Main stage session time August 7 at 2 pm DEF CON 34

Attack lab time August 8 at 12:20 pm AWS Bedrock session

Expert session time August 8 at 1:30 pm DEF CON Cloud Village

Historical Context

5 past events · Latest: Jul 14 (Positive)

Pattern 5 events

Date	Event	Sentiment	24h Move	Catalyst
Jul 14	AI security expansion	Positive	+6.2%	Atlas expanded support across Anthropic's Claude enterprise suite.
Jul 09	Earnings date notice	Neutral	-2.8%	Company scheduled second-quarter 2026 results for July 28.
Jul 08	AI coding integration	Positive	-1.7%	Atlas integrated with Cursor for runtime enforcement and threat detection.
Jul 02	Customer recognition	Positive	+2.3%	Varonis received Gartner Customers' Choice recognition for the third consecutive year.
Jun 30	Security authorization	Positive	+4.3%	The Data Security Platform attained GovRAMP Authorization.

24h Move is the share-price change in the day after each event; other market factors may also have contributed.

Pattern Detected

Recent announcements showed mostly positive price alignment, with two events diverging from the announcement direction.

Key Terms

capture the flag, data exfil, cross-tenant vulnerability

3 terms

capture the flag technical

"this summer’s ultimate Capture the Flag: Breach at the Beach"

A competitive exercise in cybersecurity where participants search for hidden tokens or solve technical challenges inside computer systems, networks, or software; each found token is called a “flag.” Think of it like a digital treasure hunt that tests skills such as vulnerability discovery, exploitation, and secure coding. Investors may see CTFs mentioned as evidence of a firm’s security expertise, training rigor, or product testing, which can help gauge operational strength in protecting assets and data.

data exfil technical

"Participants will move from initial Bedrock access through data exfil"

Unauthorized transfer of sensitive or confidential information from a company’s systems to an external party, often called data exfiltration. Think of it like someone quietly removing important files from an office and taking them outside; in a business context this can include customer records, intellectual property, or financial data. It matters to investors because such breaches can trigger regulatory penalties, costs to investigate and remediate, loss of customer trust, and potential negative effects on revenues and stock value.

cross-tenant vulnerability technical

"They’ll demonstrate a critical cross-tenant vulnerability"

A cross-tenant vulnerability is a security flaw in multi-tenant software or cloud systems that lets an attacker or compromised account access data, functions, or resources belonging to other tenants (separate customers or business units) on the same platform. Like an apartment building where a single unlocked door lets someone into neighbors’ homes, this type of flaw can expose confidential data, disrupt services, and trigger regulatory, legal, and reputational consequences that matter to investors.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

See Varonis AI security in action at Booth #2948, join Varonis Threat Labs for expert sessions, and take on this summer’s ultimate Capture the Flag: Breach at the Beach

MIAMI, July 27, 2026 (GLOBE NEWSWIRE) -- Varonis Systems, Inc. (Nasdaq: VRNS), the data and AI security leader, returns to Las Vegas this August for Black Hat USA 2026 and DEF CON 34. Visit booth #2948 to learn how Varonis secures AI and agents, attend Varonis Threat Labs sessions, and play this summer’s hottest CTF, Breach at the Beach.

Play Breach at the Beach, the all-new Entra CTF: Pixel, Varonis’ threat-detecting cat, is at the beach when she learns of a breach and switches to investigator mode. Can you solve all four stages before time runs out? Play online, then visit the Varonis booth at Black Hat and in the Cloud Village at DEF CON to earn CPE credits and grab the coolest swag: https://breachatthebeach.com.

Varonis Highlights at Black Hat USA 2026

Meet Varonis at Booth #2948 - Visit Varonis in the Business Hall for live presentations, AI security demos, and conversations with Varonis Threat Labs pros and product experts. Attendees can explore the fastest path to secure, trustworthy AI.

Expert Session - When One Click is All It Takes: How to Defend the Enterprise in AI-Native Attacks. Join Varonis expert Mark Vaitsman for a session exploring how attackers are weaponizing AI systems and how security teams can defend against emerging AI-native attack techniques.

Date: Wednesday, August 5, at 10:50 am
Location: Pulse Stage 04

Expert Session - From the Frontlines: Deep Dive into Varonis Threat Labs. Hear directly from the researchers uncovering some of the industry's most important AI security vulnerabilities and attack techniques, including recent discoveries that demonstrate how AI systems can expose sensitive enterprise data.

Date: Multiple presentations during expo hours
Location: Varonis Booth #2948

Varonis Highlights at DEF CON 34

Varonis Threat Labs researchers will be on the ground at DEF CON 34, sharing AI and agentic research and engaging directly with the global security community.

Main Stage Session - Data Tomb Raider: Raiding Modern AI Vaults with Legacy Flaws for Treasure Stealing. Join Varonis Threat Labs experts Dolev Taler and Mark Vaitsman as they break down a one-click attack against Microsoft 365 Copilot. Go in-depth to see the full chain and live demo, and get a methodology for hunting composition bugs across AI-integrated platforms.

Date: August 7 at 2 pm
Location: LVCC - L1 - Exhibit Hall West 3 - 1006 (Main Track 1)

Expert Session - Pinchy Gets Played: How We Red-Teamed AI Agents Before the Threats Did. Join Varonis’ Doron Kapah for a deep dive on the new risks autonomous AI brings to the cloud. You'll leave with a clearer picture of where AI agents fail, why the threat model is unlike anything that came before it, and what architectural controls — not prompts or policies — actually keep environments secure.

Date: August 8 at 12:20 pm
Location: DEF CON Cloud Village

Attack Lab - Breaking AWS Bedrock: Novel Attack Techniques Against Cloud Infrastructure. In this hands-on lab, Varonis Threat Labs experts Maya Parizer and Tal Peleg take you inside real-world AWS Bedrock deployments to examine patterns across environments. Participants will move from initial Bedrock access through data exfil, lateral movement, and account compromise, exploiting the same misconfigurations found in the wild.

Date: August 8 at 1:30 pm
Location: Zone A, Room 312

Expert Session - Go with the Flow: Riding GCP Dataflow Shadow Dependency to cross-Tenant Compromise. Hear Varonis Threat Labs experts Tamir Yehuda and Gil Weizman present two novel attack techniques that weaponize unvalidated config files to hijack trusted data pipelines. They’ll demonstrate a critical cross-tenant vulnerability that extends this issue by enabling manipulation of Dataflow orchestration across tenant boundaries.

Date: August 7 at 3:10 pm
Location: DEF CON Cloud Village

Additional Resources:

• Learn more about Varonis at Black Hat and DEF CON.
• Request your Varonis Atlas demo.
• Visit our blog, and join the conversation on LinkedIn and YouTube.
  

About Varonis
Varonis (Nasdaq: VRNS) secures AI and the data that powers it. The Varonis platform gives organizations automated visibility and control over their critical data wherever it lives and helps ensure safe and trustworthy AI from code to runtime. Backed by 24x7x365 managed detection and response, Varonis gives thousands of organizations worldwide the confidence to adopt AI, reduce data exposure, and stop AI-powered threats.

Investor Relations Contact:
Tim Perz
Varonis Systems, Inc.
646-640-2112
investors@varonis.com

News Media Contact:
Rachel Hunt
Varonis Systems, Inc.
877-292-8767 (ext. 1598)
pr@varonis.com

FAQ

What is Varonis (VRNS) doing at Black Hat USA 2026 in Las Vegas?

Varonis will present AI security demos, live talks, and research at Black Hat USA 2026, focusing on securing AI and agents. According to Varonis, attendees can visit Booth #2948 for live presentations, AI security demonstrations, and discussions with Varonis Threat Labs and product experts.

When and where is the Varonis (VRNS) session on AI-native attacks at Black Hat USA 2026?

Varonis expert Mark Vaitsman will present “When One Click is All It Takes: How to Defend the Enterprise in AI-Native Attacks” on Wednesday, August 5, at 10:50 am. According to Varonis, this session will be held on Pulse Stage 04 at Black Hat USA 2026.

What is Varonis’ Breach at the Beach CTF and how can Black Hat and DEF CON attendees participate?

Breach at the Beach is an online Entra capture-the-flag challenge themed around Pixel, Varonis’ threat-detecting cat. According to Varonis, participants can play online, then visit Booth #2948 at Black Hat or Cloud Village at DEF CON to earn CPE credits and collect swag.

Which DEF CON 34 main stage talk is Varonis (VRNS) delivering and when?

Varonis Threat Labs will deliver “Data Tomb Raider: Raiding Modern AI Vaults with Legacy Flaws for Treasure Stealing” on August 7 at 2 pm. According to Varonis, this Microsoft 365 Copilot attack walkthrough is scheduled in LVCC - L1 - Exhibit Hall West 3 - 1006 (Main Track 1).

What Varonis (VRNS) sessions at DEF CON 34 focus on AI agents and cloud security?

Varonis’ Doron Kapah will present “Pinchy Gets Played” on August 8 at 12:20 pm in the DEF CON Cloud Village. According to Varonis, the talk examines autonomous AI risks and emphasizes architectural controls that help keep cloud environments secure beyond prompts and policies.

What is the Varonis (VRNS) AWS Bedrock attack lab at DEF CON 34?

Varonis Threat Labs will run “Breaking AWS Bedrock: Novel Attack Techniques Against Cloud Infrastructure” on August 8 at 1:30 pm. According to Varonis, this hands-on lab in Zone A, Room 312 walks participants through real-world Bedrock misconfigurations leading to data exfiltration and account compromise.

What GCP Dataflow security research will Varonis (VRNS) share at DEF CON 34?

Varonis experts Tamir Yehuda and Gil Weizman will present “Go with the Flow: Riding GCP Dataflow Shadow Dependency to cross-Tenant Compromise” on August 7 at 3:10 pm. According to Varonis, the talk shows how unvalidated config files can hijack pipelines and enable cross-tenant orchestration manipulation.