Cutting-Edge Cloud Research. Real-World Cloud Defense.
Welcome to Mitiga Labs, our research and innovation arm dedicated to investigating emerging cloud and SaaS threats and advancing proactive response strategies to help security teams stay ahead of what's next in terms of security risks.
Top 10 Cloud Threats in 2025
Built for detection engineers, SOC teams, and cloud defenders, this guide is a must-read for anyone responsible for keeping modern environments secure.
Read Full Report
Purposeful Insights on the Cloud Security Frontier
Mitiga Labs is the research and development engine powering Mitiga’s threat intelligence and response strategies. Our expert team of cloud security researchers focus on emerging attack techniques, publish original findings, and help shape the future of proactive cloud defense.
Mitiga Labs doesn’t just observe the cloud threat landscape – we’re reverse-engineering it.
Latest from the Labs
Explore the latest discoveries, deep dives, and technical how-tos from the Mitiga Labs team. Our research is dedicated to informing defenders and disrupting attackers.
Hackers in Aisle 5: What DragonForce Taught Us About Zero Trust
A major social engineering campaign by DragonForce hit UK retailers leading to ransomware deployment and data exfiltration. Mitiga Labs examines the attack and highlights where Zero Trust could have stopped it.
No One Mourns the Wicked: Your Guide to a Successful Salesforce Threat Hunt
Explore a threat-hunt framework for Salesforce, illustrating behavior-based detection and proactive techniques to identify hidden or early-stage compromises in your org.
Tag Your Way In: New Privilege Escalation Technique in GCP
What if attackers with low-level tag permissions could manipulate IAM Conditions to elevate privileges unexpectedly in Google Cloud Platform? Well, they can!
Who Touched My GCP Project? Understanding the Principal Part in Cloud Audit Logs – Part 2
Gavriel dives deeper into audit log principals in GCP covering service agents, workload identities, impersonation paths, and how they affect forensic timelines during incident investigations.
Research Team
Mitiga Helios Al
The next critical capability for Mitiga Al is here. Explore our new solution to automate alert triage and reduce SecOps workload.
