Platform
Solutions
Resources
Company
Attack research you can run against your own environment. Mitiga Labs' researchers and responders work real breaches across cloud, SaaS, identity, third-party services, and AI. Every finding comes with the method to check your own estate.
Explore Our ResearchAI & Agent Security
Mitiga Labs Team
Read the Post →Identity & Access
Threat Hunting & Detection
Ucha Gobejishvili
Read the Post →AWS
Threat Hunting & Detection
Yafit Shayo
Read the Post →
INSTRUCTION FILES YOUR AGENT READS — AND NOBODY OPENS.
Rule files, hooks, and CLAUDE.md run automatically the moment an agent loads them. Mitiga Labs found instruction files quietly recording prompts, tokens, and environment variables, then shipping them out. No malware, often no audit log.
See How it WorksLet them come
A Research Report from Mitiga Labs
Mitiga Labs is where we take apart cloud, SaaS, identity, third-party services and AI attacks, then write what they find into the detections customers run. Those detections interrupt the next attack before it reaches the business. That's Zero-Impact Breach Prevention.
Explore the latest discoveries, deep dives, and technical how-tos from the Mitiga Labs team. Our research is dedicated to informing defenders and disrupting attackers.
A Mitiga Labs report on PromptLoggers and exfiltration hidden in AI instruction files — six real public-repo case studies, the techniques, and how to detect them before an agent runs.
Mitiga Research Team
Stolen ConnectWise app credentials gave attackers app-only access to Microsoft 365. A six-part method for hunting third-party app abuse in Entra ID.
Ucha Gobejishvili
Read the Post →In a security data lake, a detection can be correct and still never finish. How two months of PySpark tuning became 34 rules that cut runtime up to 60%.
Yafit Shayo
Read the Post →Google Cloud
Cloud Forensics & Logging
Part 1 of Mitiga's GCP forensic guide covers Cloud Audit Logs, identity types, service accounts, and impersonation to determine who accessed your GCP project.
Gavriel Fried
Read the Post →AWS
Identity & Access
Understand why AWS replaced your role's ARN with a unique ID in your policy and learn how it affects your IAM management and cloud security practices.
Stav Ochakovski
Read the Post →Breach & Campaign Analysis
Identity & Access
Understand the Midnight Blizzard Microsoft breach by APT29, what happened, and key steps organizations should take to strengthen their defenses.
Doron Karmi
Read the Post →Software Supply Chain & CI/CD
Threat Hunting & Detection
Guide your engineering infrastructure security using Mitiga's tactical blueprint for identifying GitLab threats and protecting critical CI/CD pipelines.
Gavriel Fried
Read the Post →AWS
Identity & Access
Focus on cloud credential management optimization using Mitiga's technical analysis of the newly announced AWS EKS Pod Identity feature for Kubernetes.
Stav Ochakovski
Read the Post →Attack Research
Threat Hunting & Detection
Cloud ransomware attacks on Azure Storage are rising. Learn how attackers exploit access keys and permissions, and how to detect and prevent these attacks.
Gavriel Fried
Read the Post →AWS
Attack Research
Flag post-exploitation cloud infrastructure vulnerabilities using Mitiga's technical advisory on abusing the AWS Systems Manager agent as a stealth RAT.
Ariel Szarf
Read the Post →AWS
Attack Research
Show your SOC analysts how to detect hidden cloud threats using Mitiga's technical deep dive into malicious actors abusing the native AWS SSM agent as a RAT.
Ariel Szarf
Read the Post →SaaS Applications
Cloud Forensics & Logging
Mitiga's advisory highlights critical gaps in forensic visibility with Google Drive's Basic license, affecting security and incident investigations. Read on.
Ariel Szarf
Read the Post →Head of Cloud Security Research
Senior Incident Responder
Senior Director, Mitiga Research
Cloud Researcher
Cloud Security Researcher
Cloud Security Researcher
Cloud Security Researcher
Cloud Security Researcher
AI Detection and Response for modern infrastructure. Defend with AI, from AI, and your AI.
Learn more
