Mitiga Labs is our research and innovation arm, built to expose how modern attackers operate in Cloud and SaaS. We break down real campaigns and publish practical guidance to help security teams stop cloud attacks from having impact.
Explore Our ResearchAI & Agent Security
Mitiga Labs Team
Read the Post →AWS
Threat Hunting & Detection
Yafit Shayo
Read the Post →Threat Hunting & Detection
AI Agents & MCP
Roei Sherman
Read the Post →
INSTRUCTION FILES YOUR AGENT READS — AND NOBODY OPENS.
Rule files, hooks, and CLAUDE.md run automatically the moment an agent loads them. Mitiga Labs found instruction files quietly recording prompts, tokens, and environment variables, then shipping them out. No malware, often no audit log.
See How it WorksLet them come
A Research Report from Mitiga Labs
Mitiga Labs is where we tear into the latest Cloud, SaaS, AI, and Identity attacks. Our researchers decode how adversaries operate and turn that knowledge into defense strategies that stop cloud attacks from having impact. Every discovery fuels Mitiga’s Zero-Impact Breach Prevention.
Explore the latest discoveries, deep dives, and technical how-tos from the Mitiga Labs team. Our research is dedicated to informing defenders and disrupting attackers.
A Mitiga Labs report on PromptLoggers and exfiltration hidden in AI instruction files — six real public-repo case studies, the techniques, and how to detect them before an agent runs.
Mitiga Research Team
In a security data lake, a detection can be correct and still never finish. How two months of PySpark tuning became 34 rules that cut runtime up to 60%.
Yafit Shayo
Read the Post →How Mitiga built automated detection engineering, or FORGE, a multi-agent harness that drafts, adversarially validates, and reachability-tests detection rules against real customer data, with humans still in the loop.
Roei Sherman
Read the Post →AWS
Threat Hunting & Detection
In a security data lake, a detection can be correct and still never finish. How two months of PySpark tuning became 34 rules that cut runtime up to 60%.
Yafit Shayo
Read the Post →Threat Hunting & Detection
AI Agents & MCP
How Mitiga built automated detection engineering, or FORGE, a multi-agent harness that drafts, adversarially validates, and reachability-tests detection rules against real customer data, with humans still in the loop.
Roei Sherman
Read the Post →AI Agents & MCP
Identity & Access
A fake take-home coding test hid instructions that made a developer’s own AI assistant steal cloud credentials in under two minutes — no malware. The full attack chain and how to contain it.
Ucha Gobejishvili
Read the Post →AI Agents & MCP
Attack Research
Mitiga Labs scanned 50,000+ AI instruction files across 7,000+ repos and found hijacked Claude base URLs and 1,230+ leaking API keys — plus a free scanner, Skillgate.
Idan Cohen
Read the Post →AI Agents & MCP
What's the difference between MCP and an API? One's built for code, the other for AI agents. Here's when to use each and why you need both.
Roi Tirosh
Read the Post →Threat Hunting & Detection
Cloud Forensics & Logging
Mitiga Labs shows how cloud threat hunting connects identity, control-plane, and data-plane evidence into attack chains defenders can investigate and contain.
Ucha Gobejishvili
Read the Post →AI Agents & MCP
Identity & Access
Mitiga Labs shows how attackers steal MCP tokens from Claude Code to bypass SSO, MFA, and authentication. Learn top detection strategies for AI coding security.
Idan Cohen
Read the Post →SaaS Applications
Breach & Campaign Analysis
Stop the next supply chain attack. See how ShinyHunters compromised Rockstar via a Snowflake data breach. Get the tactical threat hunting tips your SOC needs.
Idan Cohen
Read the Post →Cloud Forensics & Logging
Kubernetes adds complexity to incident response. Use our problem scoping guide to measure blast radius and identify container escapes effectively.
Ucha Gobejishvili
Read the Post →Head of Cloud Security Research
Senior Incident Responder
Senior Director, Mitiga Research
Cloud Researcher
Senior Incident Responder
Cloud Security Researcher
Cloud Security Researcher
Cloud Security Researcher
The next critical capability for Mitiga's Al-native CDR platform is here. Explore our solution that empowers and automates SecOps, protects AI infrastructure, and defends against AI-sclaed attacks.
Learn More
