Miggo Security

We’re back from #ObservabilityCON 2026 with one clear message: Security is an observability problem. In a lightning talk, Ben Stav of Miggo and Jonathan Price of @grafana challenged the way we think about security visibility. Insights from the session: ➡️ Your org has the data your security org needs - you're just not using it yet ➡️ This is more important than ever - we gave this talk on the day of php2shell and other headline-making vulns. The observability people and SREs understood the importance at a visceral level ➡️ Security is everyone's concern - just like cost, architecture, and performance. Engineering and operations have an opportunity to empower the security org Huge thank you to the Grafana Labs team for the partnership and to everyone who joined the conversation! The future of application security isn't about collecting more alerts. It's about turning the visibility you already have into protection that matters. #ObservabilityCON #Observability #Security

🏃‍♀️🏃‍♂️Miggo on the Run! 🌙 🔥 Our Israeli team (minus a few last-minute deserters 👀 😂) took over the streets of Tel Aviv for the Tel Aviv Night Run! 🏅 And it was SO much fun! 😇 🏆 Winner Mindset? Absolutely! 🤝 Partner Mindset? We ran together! (Well… some of us walked together, but hey, teamwork is teamwork! 👀 😂) 💪 Accountability? We made sure no one got left behind. Otherwise, there's no way we would've all made it back to the office for burgers. Someone would've definitely gotten lost! 🍔 😂 Huge shoutout to everyone who showed up and made it such a fun night! 💜 🚀

We’re heading to OWASP Global AppSec USA in San Francisco ✈️ Critical vulnerabilities aren’t occasional events anymore. Black October alone brought PHP2Shell and Node2Shell. Miggo Security’s customers didn’t have to wait for patches. Miggo WAF Copilot deployed blocking rules directly into their WAFs, and AWS WAF users got updated rules for both in Miggo’s High Emerging Threats ruleset. Mitigate now. Patch when you’re ready. Find our team at the Startup Expo, booth SU5. @owasp #GlobalAppSec #AppSec #RuntimeSecurity

🚨 PHP2Shell Update #4: Watch Miggo block the exploit from inside the application Defense-in-depth mitigation starts with two layers: protection at the edge and blocking inside the application. A WAF inspects the request. Miggo’s runtime sensor sees what happens inside the application, and Miggo Shield blocks the attacker’s command before it executes. The app keeps running without disruption. Mitigate now. Patch when you’re ready. 🎥 Watch the demo: miggo.io/post/php2shell-from… #PHP2Shell #AppSec #RuntimeSecurity

Attackers move at machine speed. Patching still moves at human speed. Black October was a clear reminder of the mismatch between autonomous attackers and organizational patching. Organizations need to operate on two clocks: Remediation is the slow clock: it fixes the root cause. Mitigation is the fast clock: it closes the exploit path. When attackers move in hours, waiting for the next patch cycle leaves a dangerous window of exposure. That's where Autonomous Mitigation comes in. That's where #AutonomousMitigation comes in. 📖 miggo.io/post/autonomous-mit… #AppSec #RuntimeSecurity #ExposureManagement #remediation

🚨 PHP2Shell. Now Node2Shell. Critical vulnerabilities keep coming. Patching takes time. Static WAF rules can be bypassed. Miggo's Autonomous Mitigation helps close the gap with evolving protection while you patch. 🔗 miggo.io/post/node2shell-cve…

🚨PHP2Shell Update #3: Your Questions, Answered. The patches are out, but security teams still have plenty of questions about CVE-2026-109618 and CVE-2026-109619. Am I vulnerable? What if I'm running an older PHP version? Can a WAF really protect me while I patch? Our research team at Miggo has put together a practical PHP2Shell FAQ covering the questions we're hearing most: ✅ Who's vulnerable? ✅ What about PHP 8.1 and older? ✅ Is a WAF enough? ✅ What should security teams do now? One important takeaway: A WAF rule isn't a one-time fix. Autonomous attackers are finding new exploits as we speak. Protection required a continuous mitigation loop. Have a question that’s not answered? Drop it below and our experts will have an answer soon. Mitigate Now. Patch When You're Ready. 🔗 Read the PHP2Shell FAQ: miggo.io/post/php2shell-faq-… #PHP2Shell #AppSec #Cybersecurity #AWSWAF

🚨 If your team runs PHP, today matters. Two critical RCE flaws (CVSS 9.2). Fixes scheduled for 14:00 UTC. No confirmed official patches for PHP 8.1 or older. Miggo's research team breaks down what's confirmed, how to reduce exposure, and what we're doing. miggo.io/post/php2shell-what…

We’re heading to #LASCON in Austin, TX next week. AI attackers can discover, weaponize, and exploit vulnerabilities at machine speed. No human in the loop. Your patch cycle wasn’t built for that. Your mitigation can be. Stop by table #22 and talk to Eric Six, Michael Kruzer, and William Lee about autonomous mitigation that protects your systems at machine speed. @owasp #AppSec #RuntimeSecurity

97% of organizations taking 4-7 days to remediate were breached, even when the vulnerability was already on their radar. Daniel Shechter and @cloudsa’s Hillary Baron discuss what the data reveals about remediation speed. Watch on demand: 44635071.fs1.hubspotusercont…

In part 1: AI made finding vulnerabilities cheap and fast. But that was only half the moat. Turning a vulnerability into a working exploit was its own expensive, specialized craft. AI took that too. With agents in the loop, time-to-exploit is now under an hour. Both links that were ever hard fell at the same time, for the same reason. The moat is gone. Faster patching isn’t enough. Part 2 lays out a 3-step strategy for defending at machine speed. miggo.io/post/the-moat-was-s…

Your observability telemetry can answer security questions: what’s vulnerable, what’s exposed, and what happened. Ben Stav (Miggo) and Jonathan Price (@grafana Labs) share practical use cases to reduce your patching burden and build past limitations. Wednesday at #ObservabilityCON. Code: MIGGOINVITE50 to save 50%: grafana.com/events/observabi… #Observability #Security

Welcome new aMiggos. 🎉 We’re growing, we’re moving fast, and the best part is the incredible people joining us for the ride. Welcome to the team! Exciting things ahead. 👀 #aMiggos #MiggoLife

Security is an observability problem. So what can your telemetry tell you about security? Join us at #ObservabilityCON where Ben Stav from Miggo and Jonathan Price from @grafana explore how observability telemetry can help teams uncover security risks. 🗓️Wednesday, October 21 | 3:45 PM 📍Lightning Talk Theater, Pier 27 Use MIGGOINVITE50 to save 50% on your ticket. grafana.com/events/observabi… #ObservabilityCON #Observability #Security

AI engineering content has been promising dark factories, parallel agents, and entire codebases rewritten overnight. Most engineers are still staring at the first step. But can we automate one pull request a human can merge in 5 minutes? All complex problems are smaller, simpler problems that need to be arranged and solved in succession. The goal isn’t to solve all of them. It’s to solve the next one faster. Here’s how Ben Stav and and the Miggo engineering team took things from 0 to 200+ responsibly merged PRs: miggo.io/miggo-engineering-i… #AgenticAI #DevOps #EngineeringCulture

The September Miggo CVE Threat Report is here, and 25 of these vulnerabilities are already being exploited. Our AI-powered analysis engine reviewed 13,850+ vulnerabilities last month: 🔍 13,850+ total vulnerabilities 🔴 1,469 critical issues 🟠 6,063 high-severity issues 📊 7.3 average CVSS score ⚠️ 25 actively exploited in the wild (KEV) Not theoretical. Not predicted. Already happening. Out of 13,850+, we've identified the 10 that carry the highest business risk this month. 👉 monthlyreports.miggo.io/Sept… Want the full picture? Explore our Vulnerability Database: 🔗 miggo.io/vulnerability-datab… #AppSec #CVEReport #MiggoSecurity #RuntimeSecurity #CyberSecurity

Attending #InfoSecWorld? Miggo Security, @snyksec and Vega invite you to an intimate dinner with fellow security leaders. Between sessions and booths, there’s not much time for real conversation. Come connect with peers from across the industry and share what’s working in AppSec and runtime defense, or just enjoy a great meal 🙂 📅 𝗧𝘂𝗲𝘀𝗱𝗮𝘆, 𝗢𝗰𝘁𝗼𝗯𝗲𝗿 𝟭𝟯 | 𝟱:𝟯𝟬–𝟴:𝟯𝟬 𝗣𝗠 Seats are limited. Reserve yours here: go.snyk.io/infosec-world-blu… @InfoSec_World

Mitigation must replace remediation as the first course of action. CVE-2026-87902 is the latest proof. Attackers probed @WordPress sites within hours of disclosure. Teams relying on traditional protection remained exposed for days - well after exploitation was already happening in the wild. The difference comes down to how a mitigation is built. Miggo understands the vulnerability at the function level, resting the analysis on runtime truth - so the rule blocks every variant without disrupting legitimate traffic. Miggo customers on WAF Copilot and @AWS WAF had coverage within 24 hours. Faster than any other WAF. Zero lines of rule logic written. miggo.io/post/miggo-and-aws-… #AutonomousMitigation #ExposureManagement #RuntimeSecurity

OpenAI published Defense Factory, its security playbook for an era of AI-assisted mass exploitation and unprecedented CVE volumes. Five stages. All moving toward a patch. None protecting the application while remediation takes days or weeks. That gap is the exposure window. That's the stage Defense Factory is missing - and what Miggo is built for. Mitigate now. Patch when you're ready. 🔗 miggo.io/post/defense-factor… #AutonomousMitigation #ExposureManagement #RuntimeSecurity

Miggo Security is honored to be named a 2026 SINET16 Honoree alongside a group of companies shaping what comes next in cybersecurity. Selected from 158 applicants across 10 countries and evaluated by 100 security professionals, Miggo is the only ADR and mitigation company among this year's esteemed honorees. The recognition signals the industry shift. "Enterprises need mitigation-first, autonomous defense they can trust to block exploitation while patching is underway," said Daniel Shechter, co-founder and CEO of Miggo. Miggo is the first ADR solution built to deliver autonomous mitigation for exploitable vulnerabilities, reducing exposure windows by up to 99% and cutting operational overhead by 30% or more. Grateful to @SINETconnection, Robert Rodriguez, Heather Rodriguez and the judging committee for this recognition. miggo.io/post/miggo-security…