by BT Rao · 2016 · Cited by 225 — This study identifies the issues related to the cloud data storage such as data breaches, data theft, and unavailability of cloud data.
## What are cloud storage security issues? Cloud storage security issues are risks that can compromise the confidentiality, integrity, or availability of data stored in cloud services, especially when that data is your last line of defense: Backups. [...] Misconfigured identity and access is the biggest cloud storage security issue, especially when broad IAM roles, shared admin accounts, or exposed keys allow someone to delete or change backup data. Attackers who steal credentials often target retention and delete APIs first, turning a manageable incident into a recovery failure. Key safeguards: Least privilege, MFA, separate admin roles, immutable retention, and alerts on delete/policy changes. [...] A major (and often underestimated) driver of cloud storage security issues is cross-border data transfer restrictions. Cloud storage architectures frequently replicate data across regions for durability, disaster recovery, or performance. If that replication or a recovery workflow moves backup data outside an approved jurisdiction, it can create unintentional compliance exposure, even when your “primary region” is set correctly.
## #8: Human error According to the Thales Global Cloud Security Study, human action was responsible for 44% of cloud data breaches reported incidents. These errors can take many forms, including misconfigurations and access management issues. Many of these vulnerabilities are caused by limited knowledge about security best practices or poor strategic planning. To minimize this threat: Train your DevOps team, sysadmins, and managers on cloud security best practices. [...] Always have your data storage set to private by default for your cloud resource. When using Terraform or another infrastructure as code (IaC) framework, make sure to have an established IaC file review process. Always use HTTPS instead of HTTP. The same goes for any other protocol; for example, you should use SFTP instead of FTP. You should also use the latest version of SSL/TLS. Restrict all inbound and outbound ports if they are not needed for a given machine fronted on the internet. [...] As companies increase their use of cloud hosting for storage and computing, the risk of an attack on their cloud services increases because the cloud presents a highly dynamic and distributed landscape. As noted in the CrowdStrike 2024 Global Threat Report, there was a 75% increase in cloud environment intrusions in 2023. The report also revealed a 110% spike in cases involving cloud-conscious threat actors, which are threat actors that are aware of the ability to compromise cloud workloads and
akamai.com
article
A cloud vulnerability is a weakness or flaw in a system that can be exploited by cybercriminals to gain unauthorized access, steal data, or cause disruptions. These vulnerabilities can result from software bugs, misconfigurations, or inadequate security measures. Due to the shared nature of cloud infrastructure, a single vulnerability can impact multiple customers simultaneously, increasing the potential scale and impact of security incidents in cloud environments. Common vulnerabilities [...] Cloud computing has become an essential part of modern technology, offering many benefits in flexibility, cost savings, and scalability. However, along with these advantages come serious security risks and vulnerabilities. Cloud vulnerabilities are weaknesses in cloud systems or components that can lead to data breaches, cyberattacks, and other harmful consequences. Proactively addressing these vulnerabilities is crucial to keeping information and infrastructure safe in the cloud. [...] To address cloud vulnerabilities, security teams can deploy multiple levels of security solutions, strategies, and technologies. A comprehensive cloud vulnerability management approach is essential for proactively identifying, assessing, and remediating risks in cloud environments. Properly configuring cloud resources
Vulnerability management through a strong patching policy can reduce the threat of zero-day vulnerabilities without requiring much effort. Set a patching policy with a schedule for making updates – this might be once a month or once a week, depending on the criticality of the data available in your cloud storage. For example, Microsoft has Patch Tuesday on the second Tuesday of every month. Businesses may also implement a patch management system, which may include automated steps to ensure [...] On a high level, organizations should look at their systems periodically to identify new vulnerabilities that may call for additional IT security measures. Businesses may also want to bring in outside professionals to audit their cloud storage security if they lack in-house expertise or don’t have enough time to review their cloud security posture. ## Building a Strong Cloud Storage Security Plan [...] Data that is only available in one place will always be more vulnerable than data that has a backup somewhere. Regularly backing up data to a separate location, especially one that is geographically distinct, can protect businesses from data breaches, natural disasters, accidental deletion, and more.
Organizations then began to address security vulnerabilities by embedding best practices in their design, development, and deployment cycles. As cyberthreats grew and bad actors found more nuanced ways to attack systems, companies have adopted end-to-end encryption and enacted Zero Trust models that begin all operations with security as their focus. [...] Initially considered an extension of traditional perimeter defense, cloud storage security has grown to encompass its own set of frameworks, integration policies, and advanced encryption techniques as understanding of its unique security needs has deepened. Standards like ISO/IEC 27017 and ISO 2701, along with cloud control frameworks, offer guidelines for implementing and auditing cloud security, establishing a solid foundation to begin from. [...] How secure cloud storage is goes beyond protecting valuable data; it's about safeguarding operational integrity, trust, and compliance. By adopting advanced account and data security features, implementing zero trust policies and real-time, continuous monitoring, organizations can reduce their security risks. Constant vigilance is the moat around your impenetrable data fortress.
Cloud security is essential in helping organizations address specific vulnerabilities and threats. Employee negligence or lack of training can create cloud security threats, such as oversharing files via public links that anyone can access. Data theft by insiders is also common. For example, salespeople leaving a company can steal data from cloud CRM services. [...] Cyber criminals often exploit vulnerabilities and weaknesses in cloud security to gain access to valuable data and assets. Once attackers access cloud account credentials, they impersonate legitimate users. They can trick your people into wiring money to them or releasing corporate data. They can also hijack email accounts to distribute spam and phishing emails. [...] Cloud security encompasses the technologies, applications, controls, and policies that protect people, data, and infrastructure from cyber-attacks and compliance risks on cloud computing platforms. It involves a comprehensive set of security measures designed to address both external and internal security threats to organizations, including controlling security, compliance, and other usage risks of cloud computing and data storage.