logo

Mitiga

ID: 88018b60-d7bc-5522-8df7-943376dd6b81

STIX ID: identity--88018b60-d7bc-5522-8df7-943376dd6b81

Feed Type: skeleton

Earliest post: 2026-01-15

Latest post: 2026-07-31

Cloud and SaaS security research from Mitiga, focused on threat intelligence, cloud incident response, identity attacks, AI security, ransomware, and runtime detection across modern enterprise environments.

01/01/2020
08/24/2026
Title Date Published Describes IncidentAuthorVisible
MOAB: A Wake-Up Call for Enhanced Cyber Preparedness2026-07-22TrueTrue
Hackers in Aisle 5: What DragonForce Taught Us About Zero Trust2026-07-22TrueTrue
Customer Advisory Kaseya VSA Ransomware Incident2026-07-22TrueTrue
Cyber Trends for 2024: What Security Leaders Should be Executing Next2026-07-22TrueTrue
More on Abusing the Amazon Web Services SSM Agent as a Remote Access Trojan2026-07-22TrueTrue
AWS Login Phishing Attack: How Attackers Exploit New Authentication2026-07-22TrueTrue
Google Workspace - Log Insights to Your Threat Hunt2026-07-22TrueTrue
Why Wi-Fi Isn’t Enough: Joseph Salazar on Wireless Airspace Security2026-07-22TrueTrue
ShinyHunters and UNC6395: Inside the Salesforce and Salesloft Breaches2026-07-22TrueTrue
God-Mode in the Shadows: When Security Tools and Excessive Permissions Become Cloud Security Risks2026-07-22TrueTrue
Log4Shell — Forensic Investigation in AWS2026-07-22TrueTrue
Mitiga Security Advisory: Abusing the SSM Agent as a Remote Access Trojan2026-07-22TrueTrue
Google Cloud Platform Exfiltration: A Threat Hunting Guide2026-07-22TrueTrue
Stop Ransomware Attackers From Getting Paid to Play Double-Extortionware Games2026-07-22TrueTrue
Lessons Learned from WannaCry: Are We Ready for Another Global Attack?2026-07-22TrueTrue
Ransomware Strikes Azure Storage: Are You Ready?2026-07-22TrueTrue
Log4j Vulnerability Fix: Comprehensive Log4Shell Resources2026-07-16TrueTrue
Modern Malware — Spyware Skills, Hijacked Base URLs, and 1,230+ Leaking API Keys in AI Instruction Files2026-07-16TrueTrue
Hidden Dangers in the Cloud Control Plane2026-07-16TrueTrue
Scattered Lapsus$ Shiny Hunters Strikes Salesforce Again2026-07-16TrueTrue
Claude Code + Slack: How an AI Agent Integration Becomes a Compromise Path2026-07-16TrueTrue
MCP Token Theft in Claude Code: A Man-in-the-Middle Attack Chain2026-07-16TrueTrue
Guide: CircleCI Breach Cybersecurity Incident Hunting Guide2026-07-16TrueTrue
How Missing Logs Impact Cloud Security2026-07-16TrueTrue
How to NOT pay ransomware and live to tell the tale2026-07-16TrueTrue
Agentic Runtime Security: When Patching Can’t Keep Up.2026-07-16TrueTrue
Okta Logs Threat-Hunting Guide: Hunt for Breach Evidence2026-07-16TrueTrue
ConsentFix: OAuth Phishing That Bypasses MFA in Microsoft Entra ID2026-07-16TrueTrue
ShinyHunters: Salesforce’s Uninvited Guest User Profile Breach | Mitiga2026-07-16TrueTrue
AI Agent Supply Chain Risk: Silent Codebase Exfiltration via Skills2026-07-16TrueTrue
How to Beat the Cubans in the Cuba Ransomware Gang2026-07-16TrueTrue
Defending SaaS & Cloud Workflows: Supply Chain Security Insights with Idan Cohen2026-07-16TrueTrue
CORSLeak: Abusing IAP for a Stealthy Data Exfiltration Attack2026-07-16TrueTrue
How to Protect Your Business From the Most Dangerous Cyberthreats2026-07-16TrueTrue
Salesforce Data Loader Exfiltration Attack Explained2026-07-16TrueTrue
What is the Spring4Shell exploit? An overview of the Spring vulnerability2026-07-16TrueTrue
Inside the AI Supply Chain: Security Lessons from 10,000 Open-Source ML Projects2026-07-16TrueTrue
ShinyHunters & Rockstar: Snowflake Data Breach Leads to Compromise2026-07-16TrueTrue
Hunting Conditional Access Policy Bypass in the Wild: Leveraging Malicious Browser Extensions for Seamless Initial Access2026-07-16TrueTrue
How Identifying UserData Script Manipulation Accelerates Investigation2026-07-16TrueTrue
Log4Shell - identify vulnerable external-facing workloads in AWS2026-07-16TrueTrue
Google Cloud Vulnerability Management: Insufficient Forensic Visibility2026-07-16TrueTrue
Lacking readiness, massive Twitch.tv breach may be a win for competitors2026-07-16TrueTrue
Google Drive Security Gaps in Forensic Visibility2026-07-16TrueTrue
Breaking Down the Microsoft Entra ID Actor Token Vulnerability: The Perfect Crime in the Cloud2026-07-16TrueTrue
The Domino Effect of a Software Supply Chain Attack2026-07-16TrueTrue
Top 5 Best Practices for AI-Powered Cloud Detection and Incident Response2026-07-16TrueTrue
Uber Cybersecurity Incident: Which Logs Do IR Teams Need to Focus On?2026-07-16TrueTrue
The Role of Third-party Validation in your Cloud Security2026-07-16TrueTrue
The ultimate cybercriminal gift list: undisclosed zero-day vulnerabilities2026-07-16TrueTrue

1–50 of 74