Roei Sherman, Senior Director, Mitiga Research

With over a decade of experience in adversarial cybersecurity roles, Roei specializes in Red Team operations, employing an adversarial mindset and guerrilla tactics for defensive offense. Roei's technical acumen spans Red Team engagements, social engineering, physical security, deception, and incident response on various platforms.

The Rising Threat of Adversarial AI Attackses: Preparing for the Next Wave of Cloud and SaaS Attacks

Learn about the rising threat of AI-enabled adversaries, uncover how vulnerabilities are exploited, and discover strategies to protect your digital assets now.

10 Strategies to Communicate Cloud Security Gaps to Leadership

Read actionable strategies to communicate cloud security gaps and recommendations to leadership.

5 Tips to Address the Cybersecurity Skills Gap

Cybersecurity leaders face challenges with the ongoing skills gap. Learn five strategies and tips to address these challenges.

IaaS vs PaaS vs SaaS: What Are the Differences?

Learn the different methods businesses use to build, manage, and scale digital infrastructure.

5 Common Threat Actor Tactics Used in Cloud, Identity, and SaaS Attacks

Explore five common tactics used in cloud attacks and recommendations on how to defend against them.

National Cybersecurity Awareness Month Recommendations

Explore strategies and examples of how to handle cloud security incidents when prevention isn’t enough.

Why Cloud Threats in Healthcare are Surging and How to Combat Them

The healthcare industry is having an increasingly challenging time when it comes to cyber security.

How Behavioral Detections Aid Healthcare Security

Healthcare organizations face unique cybersecurity challenges due to their hybrid IT (information technology) environments, sensitive data, and resource constraints.

Using Gen AI for Cloud Threat Detection and Investigation

AI-driven cloud attacks require and AI-driven response. Learn how AI can automate threat intelligence, accelerate response times, and simplify investigations.

The Red Team Mindset: Why Adversarial Testing is Critical for Cloud Security

Attacks against cloud and SaaS deployments are unfortunately inevitable.

Overcoming the Challenges of Securing SaaS

Generally speaking, when most CISOs think about their cloud security, they’re keyed into their cloud infrastructure held at big providers like AWS, Azure, and GCP. Their typical focus is on securing virtual machines, storage and networks that run on cloud infrastructure. All of this is hugely important.

What Most SOC Teams are Missing in Their Cloud Security

For decades, Security Operations Center (SOC) have been at the foundation of organizational security and risk mitigation. SOCs perform critical operations, helping to keep systems updated and handle the day-to-day monitoring of organizational IT.

What CSPMs Can't Do for Your Cloud Security

In recent years, Cloud Security Posture Management (CSPM) tools have become increasingly popular, and with good reason. The posture management capabilities a CSPM provides can help an organization better understand cloud configuration to prevent potential security incidents.

Roei Sherman

Senior Director, Mitiga Research