BREA, Calif. - ColoradoDesk -- ThreatHunter.ai today announced expanded coverage for MILBERT.ai to protect Google Workspace and Google Cloud against modern MFA bypass techniques that rely on stolen sessions, OAuth grants, and token abuse.

Security teams already know the problem. MFA can succeed and the access can still be hostile. Attackers increasingly avoid repeated MFA challenges by operating inside valid sessions, reusing tokens, and blending into normal looking identity activity. MILBERT treats identity as a continuous trust decision, not a one time checkpoint.

With this expansion, MILBERT ingests and correlates Google signals organizations already have, including Google Workspace login activity and Google Cloud Audit Logs, then evaluates behavior across Gmail, Workspace services, and cloud resources to detect suspicious sign ins, token misuse, and risky access paths as they unfold. When confidence is high, MILBERT can drive response actions to contain the attack before it spreads, including session resets and MFA resets based on policy and customer workflow.

More on Colorado Desk

• Radarsign™ Awarded Sourcewell Contract Expanding Access to Traffic Safety Solutions
• MainConcept and NETINT Bring VPU Acceleration to Easy Video API
• Boulder SEO Marketing Opens Broomfield Satellite Office and Announces Local SEO Training with AI SEO Expert Chris Raulf
• Larry R. Wasion's Jump Gate 2: Teleporter Expands the Time Travel Universe with High-Stakes Action and Ethical Dilemmas
• Bruce A. Rosenblat Releases A Pocket Full of Change, a Sharp, Thought-Provoking Book on Growth, Perspective, and Personal Change

"Google Workspace and Google Cloud are identity driven environments. If an attacker steals a valid session, they do not need to beat MFA again. They just walk. MILBERT's job is to stop blind trust and force identity to prove itself continuously using the signals Google already provides," said James McMurry, CEO of ThreatHunter.ai.

What's new

• Real time identity trust decisions for suspicious Workspace sign ins and session behavior, not just whether MFA completed.
• Correlation of Workspace activity with Cloud Audit events to surface token misuse, anomalous access, and privilege escalation sequences.
• Actionable response output including investigation steps and mitigation guidance designed to reduce false positives and speed containment.
• Deployment guidance to enable required audit sources and route events into MILBERT for analysis at scale.

Availability

Google Workspace and Google Cloud coverage is available immediately for MILBERT.ai deployments. ThreatHunter.ai provides onboarding guidance to enable required audit sources and route events into MILBERT for continuous evaluation and alerting.

More on Colorado Desk

• Marcus Boyd Announces Upcoming Children's Book The Royal World of Autism and Expands His Global Advocacy for Autism Awareness
• Colorado: Governor Polis Presents Walsenburg Mercantile with the 2026 Governor's Award for the Stephen H. Hart Awards
• Phuket Bike Week Rebrands as Hard Rock Cafe Phuket Bike Week Under Landmark 5-Year Partnership
• Boulder SEO Marketing Holds BBB A+ Accreditation, Reinforcing Its Place as Colorado's Most Trusted AI SEO Agency
• Protecting Colorado Proud: Governor Polis Signs New Law to Ensure Produce Labeled Colorado Proud Is Really Grown in Colorado

About ThreatHunter.ai

ThreatHunter.ai delivers 24/7 cybersecurity services powered by its Argos Platform, combining expert human threat hunters with AI and ML to identify threats, reduce false positives, and execute mitigation quickly. ThreatHunter.ai is a Veteran Owned Small Business.

https://www.threathunter.ai
https://www.milbert.ai

Media Contact

sales@threathunter.ai