Rethinking Cloud Security Strategies with Adversarial Exposure Validation

Gartner recently introduced Adversarial Exposure Validation (AEV) as an approach that empowers organizations to focus on validated exposures rather than chasing unimportant vulnerabilities. This article dives deep into AEV for cloud infrastructure.

MITRE ATT&CK Cloud Matrix v.16: New Techniques & Why You Should Care Part I

November 20, 2024

The MITRE ATT&CK Framework v.16 was released in October 2024 with over 19 new techniques. This blog discusses two new Cloud Matrix sub-techniques: Modify Authentication Process: Conditional Access Policies (T1556) and Resource Hijacking: Cloud

Cloud Security

Exploring the Threat Landscape for GenAI Cloud Workloads

October 28, 2024

With GenAI adoption rising significantly in various sectors over the past years, the threat landscape associated with GenAI will also evolve rapidly. Learn more about what security challenges can potentially threaten the cloud GenAI workloads.

Cloud Security

Demystifying Amazon Bedrock LLMJacking Attacks

October 13, 2024

LLMJacking attacks are increasingly targeting GenAI workloads on Amazon Bedrock. Cybercriminals illegally gain access to Large Language Models during LLMJacking attacks and resell this access via chatbots for profit.

Cloud Security

Feature Release: Adversary Emulation Meets GenAI & More

August 1, 2024

We are excited to release powerful features to the Mitigant Security Platform: Attack Emulation for AWS GenAI services, Mitigant API, and support for AWS Organizations. These features empower organizations to use GenAI cloud services securely.

Cloud Security

Emulating and Detecting Scattered Spider-like Attacks

July 24, 2024

This article shows how to leverage Threat-Informed Defense to effectively tackle cloud threat actors, e.g., Scattered Spider. Practical attacks & appropriate defense are demonstrated using Mitigant Cloud Attack Emulation & the Sekoia SOC Platform.

Cloud Security

Bedrock or Bedsand: Attacking Amazon Bedrock’s Achilles Heel

July 10, 2024

Amazon Bedrock's Achilles heel is the adoption of S3 as a RAG data source, leading to several GenAI attack vectors, including data poisoning, denial of service & S3 ransomware. This article delves into these attack vectors, detection, and mitigation.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Take control of your cloud security posture

Lorem ipsum dolor sit amet consectetur. Gravida dui scelerisque magna gravida aenean purus ridiculus. Enim.

Start 30-day Free Trial