8 results ·
● Live web index
A
akamai.com
article
https://www.akamai.com/glossary/what-are-cloud-security-threats
Cloud security vulnerabilities are weaknesses or flaws in cloud systems, applications, processes, or configurations that can be exploited by threat actors. These include weak mechanisms for authenticating users; misconfiguration of security apparatus, and software that hasn’t been updated to eliminate security issues. [...] Data breaches are events where hackers gain unauthorized access to sensitive data stored in the cloud. This includes information like credit card numbers, customer data, personally identifiable information, account details, business plans, financial records, and intellectual property. Data breaches are often caused by weak access controls, vulnerabilities in cloud infrastructure, or social engineering attacks that target the employees of cloud service providers (CSPs). Breaches can result in [...] ## Frequently Asked Questions
Cloud security threats are potential dangers that can compromise the confidentiality, integrity, and availability of cloud applications, cloud-based services, and cloud data. Cloud security threats can originate from external attackers, internal users, or human error, such as misconfiguration of the security settings on a cloud platform.
P
proofpoint.com
article
https://www.proofpoint.com/us/threat-reference/cloud-security
Cloud security is essential in helping organizations address specific vulnerabilities and threats. Employee negligence or lack of training can create cloud security threats, such as oversharing files via public links that anyone can access. Data theft by insiders is also common. For example, salespeople leaving a company can steal data from cloud CRM services. [...] Cyber criminals often exploit vulnerabilities and weaknesses in cloud security to gain access to valuable data and assets. Once attackers access cloud account credentials, they impersonate legitimate users. They can trick your people into wiring money to them or releasing corporate data. They can also hijack email accounts to distribute spam and phishing emails. [...] Cyber criminals tend to target popular SaaS applications like Microsoft Office 365 and Google G Suite. Just about everyone at your company uses these applications, which hold the key to business communication and vital data. Attackers use a variety of techniques and exploit several vulnerabilities to compromise cloud account credentials and take advantage of vulnerable users, including:
W
wiz.io
article
https://www.wiz.io/academy/cloud-security/common-cloud-vulnerabilities
Cloud security vulnerabilities are weaknesses in a cloud computing environment—like misconfigurations, a lack of encryption, and unsecured APIs—that attackers exploit to gain unauthorized access, steal data, or disrupt services. [...] ## The 11 cloud security vulnerabilities you’re sure to encounter
The most common cloud security vulnerabilities include the following:
Misconfigurations
Lack of visibility
Poor access management
Insider threats
Unsecured APIs
Zero-days
Shadow IT
Lack of encryption
Inadequate segmentation
Vulnerable dependencies
Deficient logging and monitoring [...] Because cloud APIs are the connective tissue that facilitates communication and data exchange between cloud software and applications, API vulnerabilities are a prominent attack vector for threat actors. Examples of vulnerabilities with unsecured APIs include suboptimal access controls, weak authentication protocols, wrong rate limits, and accidental data exposure.
Real-life example:
S
sentinelone.com
article
https://www.sentinelone.com/cybersecurity-101/cloud-security/security-risks-o…
3. More Risk for Data Breach: Data breaches present significant security risks in cloud computing. Misconfigurations in cloud settings, including poorly secured storage buckets and weak IAM policies, may expose sensitive data to unauthorized users. Such open vulnerabilities could be abused by attackers to steal sensitive data, causing major financial and reputational damage. Proper configuration of cloud resources and continuous monitoring for potential threats can only prevent data breaches. [...] ## FAQs
Major security risks in cloud computing include data breaches, hijacking of accounts, insecure APIs, inside threats, and misconfigurations in the cloud. Such vulnerabilities can expose business-sensitive information and affect business operations. [...] 1. Data Breach: Data breaches occur from unauthorized access to data stored in the cloud. There are consequences of such breaches, which may range from financial damages and losses, legal ramifications to even reputational damage. Furthermore, configuration errors in cloud security, credential compromises, and vulnerable applications are some of the common causes of data breaches. At least 80% of data breaches in 2023 were due to data stored in the cloud, making the cloud a vulnerable segment.
C
crowdstrike.com
article
https://www.crowdstrike.com/en-us/cybersecurity-101/cloud-security/cloud-vuln…
## #8: Human error
According to the Thales Global Cloud Security Study, human action was responsible for 44% of cloud data breaches reported incidents. These errors can take many forms, including misconfigurations and access management issues. Many of these vulnerabilities are caused by limited knowledge about security best practices or poor strategic planning.
To minimize this threat:
Train your DevOps team, sysadmins, and managers on cloud security best practices. [...] Cloud vulnerabilities are increasingly common, and it’s extremely difficult for organizations to manage highly distributed and dynamic cloud environments. We discussed the most common cloud security threats, but there are many other vulnerabilities to address. As a cybersecurity leader recognized by multiple independent testing organizations and third-party analyst firms, CrowdStrike has taken a visionary approach to designing scalable and effective cloud security that provides multi-cloud [...] Malicious insiders can also access your cloud resources via account hijacking due to a successful phishing attack and/or weak credential security (e.g., if an employee has a password that is too simple or a password is shared between accounts). This kind of vulnerability can be particularly dangerous, as data is not the only thing at risk of being stolen or changed — intellectual property is at risk as well.
To minimize this threat:
Make sure MFA is activated.
D
darktrace.com
article
https://www.darktrace.com/cyber-ai-glossary/the-most-common-cloud-security-th…
When data is improperly stored or transmitted without proper security protocols, attackers can exploit these vulnerabilities to access confidential information. This can result in significant financial losses, regulatory penalties, and reputational damage, especially as cloud services often store vast amounts of critical customer and business data across global locations.
### 2. Account hijacking [...] Use the security features provided by cloud service providers.
Undertake regular audits and updates to identify vulnerabilities and misconfiguration.
Leverage cloud security posture management (CSPM) tools to offer visibility into cloud environments and automated remediation processes that quickly address vulnerabilities.
Implement data encryption to ensure data remains unreadable if unauthorized users intercept it. [...] In cloud environments, data breaches often occur when misconfigurations, weak access controls, or inadequate encryption expose sensitive information to unauthorized parties. Unlike traditional on-premise breaches, cloud data breaches can involve multiple layers of shared responsibility, where both the cloud provider and the user play a role in securing the environment.
S
sei.cmu.edu
research
https://www.sei.cmu.edu/blog/12-risks-threats-vulnerabilities-in-moving-to-th…
Cloud environments experience--at a high level--the same threats as traditional data center environments; the threat picture is the same. That is, cloud computing runs software, software has vulnerabilities, and adversaries try to exploit those vulnerabilities. However, unlike information technology systems in a traditional data center, in cloud computing, responsibility for mitigating the risks that result from these software vulnerabilities is shared between the CSP and the cloud consumer. As [...] Graphic outline of a cybersecurity threat picture.
Cloud-Unique Threats and Risks
The following vulnerabilities are a result of a CSP's implementation of the five cloud computing characteristics. These vulnerabilities do not exist in classic IT data centers. [...] risks. In this blog post, we outline 12 risks, threats, and vulnerabilities that organizations face when moving application or data to the cloud. In our follow-up post, Best Practices for Cloud Security, we explore a series of best practices aimed at helping organizations securely move data and applications to the cloud.
C
cloudsecurityalliance.org
research
https://cloudsecurityalliance.org/research/working-groups/top-threats
###### Top Threats to Cloud Computing - Deep Dive 2025
Download
Working Group
Publications
Home
Research
Working Groups
Top Threats
Working Group Overview
This group aims to provide organizations with an up-to-date, expert-informed understanding of cloud security risks, threats and vulnerabilities in order to make educated risk-management decisions regarding cloud adoption strategies.
What do we discuss? [...] Join Anthropic, AWS, Google Cloud, Microsoft, SANS, and more this August at the SANS Cloud Security Exchange Summit →
## Working Group
# Top Threats
##### This group aims to provide organizations with an up-to-date, expert-informed understanding of cloud security risks, threats and vulnerabilities in order to make educated risk-management decisions regarding cloud adoption strategies.
View Current Projects
Top Threats to Cloud Computing - Deep Dive 2025 [...] Security questionnaire for vendors
Top threats to cloud computing
Cloud Security Glossary
Awards & Recognition
Juanita Koilpillai Awards
Research Fellows
Critical Topics
AI Safety
Zero Trust
Top Threats
Strategic Initiatives
Explore CSA's Strategic Initiatives
AI Safety Initiative
Compliance Automation Revolution
Zero Trust Advancement Center
CxO Trust
FinCloud Security
Trusted AI & Cloud Consultant
CSAIChaptersEventsBlog