Cloud Security

Misconfiguration, identity and API exposure define modern cloud risk.

Short answer: Cloud security protects infrastructure-as-a-service estates from misconfiguration, excessive identity permissions, exposed APIs and compromised credentials.

Evidence: Research · Industry advisories · MITRE · Human reviewed

Definition

Cloud security protects infrastructure-as-a-service estates from misconfiguration, excessive identity permissions, exposed APIs and compromised credentials.

Current Landscape
Identity-first attacks on cloud consoles
Recent Changes
2023: CI/CD pipeline attacks surge · 2024: Identity is the new perimeter
Evidence
Research · Industry advisories · MITRE
Sources
NVD · CISA KEV · MITRE ATT&CK · Vendor Advisories

Major Entities

  • CVE — CVE-2024-3094 (xz backdoor context)
  • CVE — SLP reflection DDoS

Timeline

  1. — CI/CD pipeline attacks surge
  2. — Identity is the new perimeter

Latest Intelligence

  • Identity-first attacks on cloud consoles
  • Sprawling ephemeral workloads

Evidence & Sources

Research · Industry advisories · MITRE · NVD · CISA KEV · MITRE ATT&CK

Related Intelligence

  • Threat actor: Underground cloud cryptomining
  • Threat actor: Front Company supply chains
  • Campaign: IIS/SLOPPYIMP malware on cloud hosts
  • Campaign: OAuth consent phishing
  • Research: Cloud misconfiguration benchmarks
  • Research: Identity risk scoring

Next Actions

Part of the OpenTrojan Security Knowledge Hub 2.0: <a href="/security/ransomware/">Ransomware</a> · <a href="/security/malware/">Malware</a> · <a href="/security/threat-intelligence/">Threat Intelligence</a> · <a href="/security/vulnerability-management/">Vulnerability Management</a> · <a href="/security/identity-security/">Identity Security</a> · <a href="/security/supply-chain/">Supply Chain</a> · <a href="/security/incident-response/">Incident Response</a> · <a href="/security/zero-day/">Zero Day</a> · <a href="/security/nation-state-threats/">Nation State Threats</a>