MITRE ATT&CK Cloud Matrix v.16: New Techniques & Why You Should Care Part I

The MITRE ATT&CK Framework v.16 was released in October 2024 with over 19 new techniques. This blog discusses two new Cloud Matrix sub-techniques: Modify Authentication Process: Conditional Access Policies (T1556) and Resource Hijacking: Cloud

Cloud Sicherheit

GenAI Security: Cloud Security fit machen für das KI-Zeitalter

October 28, 2024

Da die Akzeptanz von GenAI in den letzten Jahren in verschiedenen Sektoren erheblich zugenommen hat, wird sich auch die Bedrohungslandschaft im Zusammenhang mit GenAI rasant weiterentwickeln.

Cloud Sicherheit

Demystifying Amazon Bedrock LLMJacking Attacks

October 13, 2024

LLMJacking attacks are increasingly targeting GenAI workloads on Amazon Bedrock. Cybercriminals illegally gain access to Large Language Models during LLMJacking attacks and resell this access via chatbots for profit.

Cloud Sicherheit

Feature Release: Adversary Emulation Meets GenAI & More

August 1, 2024

We are excited to release powerful features to the Mitigant Security Platform: Attack Emulation for AWS GenAI services, Mitigant API, and support for AWS Organizations. These features empower organizations to use GenAI cloud services securely.

Cloud Sicherheit

Emulating and Detecting Scattered Spider-like Attacks

July 24, 2024

This article shows how to leverage Threat-Informed Defense to effectively tackle cloud threat actors, e.g., Scattered Spider. Practical attacks & appropriate defense are demonstrated using Mitigant Cloud Attack Emulation & the Sekoia SOC Platform.

Cloud Sicherheit

Bedrock or Bedsand: Attacking Amazon Bedrock’s Achilles Heel

July 10, 2024

Amazon Bedrock's Achilles heel is the adoption of S3 as a RAG data source, leading to several GenAI attack vectors, including data poisoning, denial of service & S3 ransomware. This article delves into these attack vectors, detection, and mitigation.

Cloud Sicherheit

Cloud Attack Emulation: Democratizing Security Operations in the Cloud

July 2, 2024

Security operations are the nerve of organizational cybersecurity efforts. An organization’s security policy typically aims to keep it safe by implementing preventive, detective, and recovery measures. Security operations ensure this ambition by s...

Danke! Deine Einreichung ist eingegangen!

Hoppla! Beim Absenden des Formulars ist etwas schief gelaufen.

Übernehmen Sie die Kontrolle über Ihre Cloud-Sicherheitslage

Übernehmen Sie in wenigen Minuten die Kontrolle über Ihre Cloud-Sicherheit. Keine Kreditkarte erforderlich.

30-Tage kostenlos testen