Everything Packet Tribune has reported about cloud security: 13 stories, newest first. Part of our Cloud Security coverage.
Misconfigured IAM roles allow attackers to move laterally across cloud accounts by exploiting implicit trust relationships and overly permissive policy statements that grant administrative access without explicit authentication.
Cloud Security Posture Management secures the configuration baseline while Cloud Workload Protection Platform defends running processes from active exploitation.
Default cloud storage settings often publish data to the global internet, turning internal repositories into searchable archives for anyone with a search engine.
The letter order dictates whether security acts as a gatekeeper reviewing code or as an embedded constraint shaping how that code is written and deployed.
Most breaches occur because legacy access controls fail to map correctly to cloud identity models, leaving migrated assets exposed.
Misconfigured trust boundaries and stale service accounts turn federated identity from a security control into a persistent attack vector.
Automated identity creation often outpaces detection, meaning your first action must be verifying the source of truth before revoking credentials.
Centralising credentials exposes a single point of failure that requires stricter access controls and audit trails than scattered configuration files ever did.
Multi-tenancy shares hardware resources while enforcing strict logical separation, meaning your data never touches another customer’s storage despite the shared infrastructure.
Immutable infrastructure eliminates configuration drift by replacing running instances rather than patching them, forcing security into the build pipeline rather than the runtime environment.
Cloud detection and response shifts focus from network perimeters to identity and configuration, but generates noise without strict baseline governance.
Most organisations miss cloud threats because they log infrastructure changes but ignore the silent identity movements that precede them.
Cloud-native application protection platforms unify disparate tools but often obscure the root cause of misconfigurations behind layers of automated remediation.