Rethinking Cloud Security Strategies with Adversarial Exposure Validation

Gartner recently introduced Adversarial Exposure Validation (AEV) as an approach that empowers organizations to focus on validated exposures rather than chasing unimportant vulnerabilities. This article dives deep into AEV for cloud infrastructure.

MITRE ATT&CK Cloud Matrix v.16: New Techniques & Why You Should Care Part I

MITRE ATT&CK Cloud Matrix v.16: New Techniques & Why You Should Care Part I

November 20, 2024

The MITRE ATT&CK Framework v.16 was released in October 2024 with over 19 new techniques. This blog discusses two new Cloud Matrix sub-techniques: Modify Authentication Process: Conditional Access Policies (T1556) and Resource Hijacking: Cloud

Exploring the Threat Landscape for GenAI Cloud Workloads

Exploring the Threat Landscape for GenAI Cloud Workloads

October 28, 2024

With GenAI adoption rising significantly in various sectors over the past years, the threat landscape associated with GenAI will also evolve rapidly. Learn more about what security challenges can potentially threaten the cloud GenAI workloads.

Demystifying Amazon Bedrock LLMJacking Attacks

Demystifying Amazon Bedrock LLMJacking Attacks

October 13, 2024

LLMJacking attacks are increasingly targeting GenAI workloads on Amazon Bedrock. Cybercriminals illegally gain access to Large Language Models during LLMJacking attacks and resell this access via chatbots for profit.

Feature Release: Adversary Emulation Meets GenAI & More

Feature Release: Adversary Emulation Meets GenAI & More

We are excited to release powerful features to the Mitigant Security Platform: Attack Emulation for AWS GenAI services, Mitigant API, and support for AWS Organizations. These features empower organizations to use GenAI cloud services securely.

Emulating and Detecting Scattered Spider-like Attacks

Emulating and Detecting Scattered Spider-like Attacks

This article shows how to leverage Threat-Informed Defense to effectively tackle cloud threat actors, e.g., Scattered Spider. Practical attacks & appropriate defense are demonstrated using Mitigant Cloud Attack Emulation & the Sekoia SOC Platform.

Bedrock or Bedsand: Attacking Amazon Bedrock’s Achilles Heel

Bedrock or Bedsand: Attacking Amazon Bedrock’s Achilles Heel

Amazon Bedrock's Achilles heel is the adoption of S3 as a RAG data source, leading to several GenAI attack vectors, including data poisoning, denial of service & S3 ransomware. This article delves into these attack vectors, detection, and mitigation.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Join The Cloud Security Revolution Today!

Take control of your cloud security in minutes. No credit card required.

Start 30-day Free Trial