Platform
Solutions
Resources
Company
Attack research you can run against your own environment. Mitiga Labs' researchers and responders work real breaches across cloud, SaaS, identity, third-party services, and AI. Every finding comes with the method to check your own estate.
Explore Our ResearchAI & Agent Security
Mitiga Labs Team
Read the Post →Identity & Access
Threat Hunting & Detection
Ucha Gobejishvili
Read the Post →AWS
Threat Hunting & Detection
Yafit Shayo
Read the Post →
INSTRUCTION FILES YOUR AGENT READS — AND NOBODY OPENS.
Rule files, hooks, and CLAUDE.md run automatically the moment an agent loads them. Mitiga Labs found instruction files quietly recording prompts, tokens, and environment variables, then shipping them out. No malware, often no audit log.
See How it WorksLet them come
A Research Report from Mitiga Labs
Mitiga Labs is where we take apart cloud, SaaS, identity, third-party services and AI attacks, then write what they find into the detections customers run. Those detections interrupt the next attack before it reaches the business. That's Zero-Impact Breach Prevention.
Explore the latest discoveries, deep dives, and technical how-tos from the Mitiga Labs team. Our research is dedicated to informing defenders and disrupting attackers.
A Mitiga Labs report on PromptLoggers and exfiltration hidden in AI instruction files — six real public-repo case studies, the techniques, and how to detect them before an agent runs.
Mitiga Research Team
Stolen ConnectWise app credentials gave attackers app-only access to Microsoft 365. A six-part method for hunting third-party app abuse in Entra ID.
Ucha Gobejishvili
Read the Post →In a security data lake, a detection can be correct and still never finish. How two months of PySpark tuning became 34 rules that cut runtime up to 60%.
Yafit Shayo
Read the Post →Software Supply Chain & CI/CD
Cloud Forensics & Logging
What GitHub security logs reveal — the events to hunt for, the long-lived tokens to watch, and what to check right now.
Austin Bollinger
Read the Post →AI Agents & MCP
Software Supply Chain & CI/CD
Analysis of 10,000 open-source AI/ML repositories reveals 70% have critical or high-severity vulnerabilities in GitHub Actions workflows, making them prone to attacks like code injection, credential theft, or repo takeover via malicious PRs.
Ucha Gobejishvili
Read the Post →SaaS Applications
Breach & Campaign Analysis
SLSH claims responsibility for breaching Gainsight, abusing OAuth tokens to target hundreds of Salesforce environments. Learn what happened, who’s affected, and how to respond.
Idan Cohen
Read the Post →Google Cloud
Attack Research
Our research on CORSLeak shows how a CORS vulnerability in Google Cloud IAP enables stealthy data exfiltration. Learn the risks and how to defend systems.
Ariel Kalman
Read the Post →Identity & Access
Breach & Campaign Analysis
Mitiga reveals how a phishing attack exploited a rogue OAuth app to breach cloud systems. Discover how to defend against OAuth attacks and read more now.
Ucha Gobejishvili
Read the Post →SaaS Applications
Breach & Campaign Analysis
Read how threat actors exploited Salesforce Data Loader for covert exfiltration. Learn Mitiga’s detection and defense strategies to stay protected.
Nir Varon
Read the Post →Attack Research
Identity & Access
Detect hidden shadow access vulnerabilities with Mitiga's analysis of third-party security tools running with unrestricted access across cloud environments.
Nir Varon
Read the Post →Breach & Campaign Analysis
Identity & Access
Read and learn about human-centric threats in Mitiga's breakdown of the DragonForce social engineering attacks targeting retail zero-trust networks.
Jed Morley
Read the Post →SaaS Applications
Threat Hunting & Detection
Salesforce is a cloud-based platform widely used by organizations to manage customer relationships, sales pipelines, and core business processes.
Ariel Szarf
Read the Post →Head of Cloud Security Research
Senior Incident Responder
Senior Director, Mitiga Research
Cloud Researcher
Cloud Security Researcher
Cloud Security Researcher
Cloud Security Researcher
Cloud Security Researcher
AI Detection and Response for modern infrastructure. Defend with AI, from AI, and your AI.
Learn more
