Demystifying The Most Pervasive Cloud Attack Techniques

Red Canary recently released the 2025 Threat Detection Report. This article discusses the most prevalent cloud attack techniques discussed in the report, including further insights and practical countermeasures for organizations.

Exploring the Threat Landscape for GenAI Cloud Workloads

Exploring the Threat Landscape for GenAI Cloud Workloads

October 28, 2024

With GenAI adoption rising significantly in various sectors over the past years, the threat landscape associated with GenAI will also evolve rapidly. Learn more about what security challenges can potentially threaten the cloud GenAI workloads.

Demystifying Amazon Bedrock LLMJacking Attacks

Demystifying Amazon Bedrock LLMJacking Attacks

October 13, 2024

LLMJacking attacks are increasingly targeting GenAI workloads on Amazon Bedrock. Cybercriminals illegally gain access to Large Language Models during LLMJacking attacks and resell this access via chatbots for profit.

Feature Release: Adversary Emulation Meets GenAI & More

Feature Release: Adversary Emulation Meets GenAI & More

We are excited to release powerful features to the Mitigant Security Platform: Attack Emulation for AWS GenAI services, Mitigant API, and support for AWS Organizations. These features empower organizations to use GenAI cloud services securely.

Emulating and Detecting Scattered Spider-like Attacks

Emulating and Detecting Scattered Spider-like Attacks

This article shows how to leverage Threat-Informed Defense to effectively tackle cloud threat actors, e.g., Scattered Spider. Practical attacks & appropriate defense are demonstrated using Mitigant Cloud Attack Emulation & the Sekoia SOC Platform.

Bedrock or Bedsand: Attacking Amazon Bedrock’s Achilles Heel

Bedrock or Bedsand: Attacking Amazon Bedrock’s Achilles Heel

Amazon Bedrock's Achilles heel is the adoption of S3 as a RAG data source, leading to several GenAI attack vectors, including data poisoning, denial of service & S3 ransomware. This article delves into these attack vectors, detection, and mitigation.

Cloud Attack Emulation: Democratizing Security Operations in the Cloud

Cloud Attack Emulation: Democratizing Security Operations in the Cloud

Security operations are the nerve of organizational cybersecurity efforts. An organization’s security policy typically aims to keep it safe by implementing preventive, detective, and recovery measures. Security operations ensure this ambition by s...

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Join The Cloud Security Revolution Today!

Take control of your cloud security in minutes. No credit card required.

Start 30-day Free Trial