Cutting-Edge Cloud Research. Real-World Cloud Defense.
Welcome to Mitiga Labs, our research and innovation arm dedicated to investigating emerging cloud and SaaS threats and advancing proactive response strategies to help security teams stay ahead of what's next in terms of security risks.
Top 10 Cloud Threats in 2025
Built for detection engineers, SOC teams, and cloud defenders, this guide is a must-read for anyone responsible for keeping modern environments secure.
Read Full Report
Purposeful Insights on the Cloud Security Frontier
Mitiga Labs is the research and development engine powering Mitiga’s threat intelligence and response strategies. Our expert team of cloud security researchers focus on emerging attack techniques, publish original findings, and help shape the future of proactive cloud defense.
Mitiga Labs doesn’t just observe the cloud threat landscape – we’re reverse-engineering it.
Latest from the Labs
Explore the latest discoveries, deep dives, and technical how-tos from the Mitiga Labs team. Our research is dedicated to informing defenders and disrupting attackers.
CORSLeak: Abusing IAP for Stealthy Data Exfiltration
When people talk about “highly restricted” cloud environments, they usually mean environments with no public IPs, no outbound internet, and strict VPC Service Controls locking everything down.
From Rogue OAuth App to Cloud Infrastructure Takeover
In a recent incident response investigation, Mitiga uncovered a chilling attack that started with a single compromised email inbox and spiraled into a full-blown takeover of an organization's cloud infrastructure.
How Threat Actors Used Salesforce Data Loader for Covert API Exfiltration
In the course of just one week, multiple organizations have gone public regarding a breach in their SaaS CRM application.
God-Mode in the Shadows: When Security Tools Become Cloud Risks
By the time the alarms go off, it’s often too late. A trusted third-party security tool, one that promised to protect your cloud and SaaS environments, has been operating with unchecked ‘god-mode’ privileges.
Hackers in Aisle 5: What DragonForce Taught Us About Zero Trust
A major social engineering campaign by DragonForce hit UK retailers leading to ransomware deployment and data exfiltration. Mitiga Labs examines the attack and highlights where Zero Trust could have stopped it.
Research Team
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
Mitiga Helios Al
The next critical capability for Mitiga Al is here. Explore our new solution to automate alert triage and reduce SecOps workload.
