Idan Cohen

Mitiga Labs scanned 50,000+ AI instruction files across 7,000+ repos and found hijacked Claude base URLs and 1,230+ leaking API keys — plus a free scanner, Skillgate.

Mitiga Labs shows how attackers steal MCP tokens from Claude Code to bypass SSO, MFA, and authentication. Learn top detection strategies for AI coding security.

Stop the next supply chain attack. See how ShinyHunters compromised Rockstar via a Snowflake data breach. Get the tactical threat hunting tips your SOC needs.

How a Claude Code–Slack integration becomes an attack path — and how to detect and contain AI agent compromise through forensic log analysis.

Security researchers reveal how attackers exploit AWS's new login feature for phishing. Includes detection methods, prevention strategies, and free testing toolkit.

Mitiga Labs shows how a malicious AI agent skill can silently exfiltrate an entire codebase, exposing a new supply chain risk in agentic AI environments.

SLSH claims responsibility for breaching Gainsight, abusing OAuth tokens to target hundreds of Salesforce environments. Learn what happened, who’s affected, and how to respond.

Mitiga Labs began investigating a series of suspicious activities targeting Salesforce environments well before the news broke publicly. It all started with traffic from Tor exit nodes interacting with Salesforce via an app called Drift. Is this normal behavior? What is Drift? And how do we assess its legitimacy? This is where the challenge of shadow IT surfaces – security operations teams are often left scrambling to determine whether such activity is authorized or a sign of compromise.

How attackers bypass Conditional Access using malicious browser extensions — a Mitiga threat hunt with detection logic and MITRE ATT&CK coverage.