MITRE ATT&CK v20: New AI Techniques & Why You Should Care

The AI attack surface spans beyond models; other components are similarly important and must be secured. This second part of the Bedrock Red Teaming blog series provides further practical guidance on means to continuously test Bedrock components.

Bedrock AgentCore starter toolkit ships an overly permissive IAM role that attackers exploit to compromise critical AgentCore components. This article discusses practical exploitation of these weaknesses, detection opportunities & countermeasures.

AI Red Teaming plays a central role in AI quality of service, ensuring end users are not harmed or frustrated by malicious output. This article provides practical AI Red Teaming guidance for Amazon Bedrock.

Mitigant Cloud Pentests now integrate with Prowler and Wiz, enabling seamless validation of CSPM findings through real, safe attack execution that surfaces SCP-aware privilege-escalation paths, fully visualized and mapped to compliance benchmarks.

Mitigant Threat Catalog massive update! We added 61 techniques & 12 AWS services, totalling 91 techniques across 32 AWS services. The catalog now includes techniques across 11 MITRE ATT&CK tactics.

We are launching (1) Mitigant Threat Catalog, a free, interactive resource that transforms MITRE ATT&CK cloud techniques into executable CLI commands, (2) The Cloud Attack Language, a format for effectively constructing complex, multi-step attacks.

This article highlights our top blog articles in 2025, from AI security to Cloud Attack Emulation, including research referenced in Splunk's Security Analytics Story and pioneering Adversarial Exposure Validation.

This blog addresses the misconception that CSPM scans are equivalent to cloud penetration tests. Understanding the critical differences between configuration auditing and security validation is essential for a robust cloud security posture.

Mitigant Attack Builder empowers defenders to build cloud attacks within seconds, enabling production-ready security tests without sacrificing time and quality.