logo

Mitiga

ID: 88018b60-d7bc-5522-8df7-943376dd6b81

STIX ID: identity--88018b60-d7bc-5522-8df7-943376dd6b81

Feed Type: skeleton

Earliest post: 2026-01-15

Latest post: 2026-07-31

Cloud and SaaS security research from Mitiga, focused on threat intelligence, cloud incident response, identity attacks, AI security, ransomware, and runtime detection across modern enterprise environments.

01/01/2020
10/14/2026
Title Date Published ↓Threat ScoreAuthorVisible
Hugging Face Agentic Attack: We Ran It Against Ourselves2026-09-2975True
J-Space, Ten Weeks On: The Second Feed Just Went Dark2026-09-2372True
Google Cloud Platform Exfiltration: A Threat Hunting Guide2026-07-2270True
Lessons Learned from WannaCry: Are We Ready for Another Global Attack?2026-07-2275True
Mitiga Security Advisory: Abusing the SSM Agent as a Remote Access Trojan2026-07-2270True
AWS Login Phishing Attack: How Attackers Exploit New Authentication2026-07-2278True
ShinyHunters and UNC6395: Inside the Salesforce and Salesloft Breaches2026-07-2278True
Why Wi-Fi Isn’t Enough: Joseph Salazar on Wireless Airspace Security2026-07-2270True
Hackers in Aisle 5: What DragonForce Taught Us About Zero Trust2026-07-2275True
Ransomware Strikes Azure Storage: Are You Ready?2026-07-2275True
Customer Advisory Kaseya VSA Ransomware Incident2026-07-2290True
Cyber Trends for 2024: What Security Leaders Should be Executing Next2026-07-2245True
Stop Ransomware Attackers From Getting Paid to Play Double-Extortionware Games2026-07-2275True
More on Abusing the Amazon Web Services SSM Agent as a Remote Access Trojan2026-07-2275True
MOAB: A Wake-Up Call for Enhanced Cyber Preparedness2026-07-2285True
Google Workspace - Log Insights to Your Threat Hunt2026-07-2235True
God-Mode in the Shadows: When Security Tools and Excessive Permissions Become Cloud Security Risks2026-07-2275True
Log4Shell — Forensic Investigation in AWS2026-07-2280True
Understanding GitLab's Security Threats and Strengthening Your Preparedness2026-07-2245True
How a Poisoned Coding Test Turned an AI Agent Into an Attacker2026-07-1680True
Ready or Not: Russian Attack on Ukraine Brings Global Cybersecurity Impacts2026-07-1672True
Advisory: Persistent MFA Circumvention in an Advanced BEC Campaign on Microsoft 365 Targets2026-07-1678True
SaaS Security: How to Think about Security in Cloud Apps and Services2026-07-1670True
10 Recommendations for Your Organization to Increase Readiness Following the Okta Breach2026-07-1675True
Rippling Turning Into a Tsunami: Insider Threats in SaaS Environments2026-07-1650True
Security Advisory: Mitiga Recommends All AWS Customers Running Community AMIs to Verify Them for Malicious Code2026-07-1670True
What is the Spring4Shell exploit? An overview of the Spring vulnerability2026-07-1650True
Scattered Lapsus$ Shiny Hunters Strikes Salesforce Again2026-07-1685True
Lacking readiness, massive Twitch.tv breach may be a win for competitors2026-07-1685True
Claude Code + Slack: How an AI Agent Integration Becomes a Compromise Path2026-07-1670True
MCP Token Theft in Claude Code: A Man-in-the-Middle Attack Chain2026-07-1675True
Guide: CircleCI Breach Cybersecurity Incident Hunting Guide2026-07-1670True
How Missing Logs Impact Cloud Security2026-07-160True
How to NOT pay ransomware and live to tell the tale2026-07-1675True
Agentic Runtime Security: When Patching Can’t Keep Up.2026-07-1680True
Okta Logs Threat-Hunting Guide: Hunt for Breach Evidence2026-07-1670True
ConsentFix: OAuth Phishing That Bypasses MFA in Microsoft Entra ID2026-07-1675True
ShinyHunters: Salesforce’s Uninvited Guest User Profile Breach | Mitiga2026-07-1680True
AI Agent Supply Chain Risk: Silent Codebase Exfiltration via Skills2026-07-1672True
How to Beat the Cubans in the Cuba Ransomware Gang2026-07-1675True
Defending SaaS & Cloud Workflows: Supply Chain Security Insights with Idan Cohen2026-07-1685True
CORSLeak: Abusing IAP for a Stealthy Data Exfiltration Attack2026-07-1665True
How to Protect Your Business From the Most Dangerous Cyberthreats2026-07-1665True
Salesforce Data Loader Exfiltration Attack Explained2026-07-1680True
Log4j Vulnerability Fix: Comprehensive Log4Shell Resources2026-07-1690True
Modern Malware — Spyware Skills, Hijacked Base URLs, and 1,230+ Leaking API Keys in AI Instruction Files2026-07-1675True
Hidden Dangers in the Cloud Control Plane2026-07-1660True
ShinyHunters & Rockstar: Snowflake Data Breach Leads to Compromise2026-07-1690True
Hunting Conditional Access Policy Bypass in the Wild: Leveraging Malicious Browser Extensions for Seamless Initial Access2026-07-1670True
How Identifying UserData Script Manipulation Accelerates Investigation2026-07-1670True

1–50 of 77