Security News > 2020 > September > Attacks growing in both scope and sophistication, exposing gaps in the cloud native toolchain

There's a growing, organized and increasingly sophisticated pattern of attacks on cloud native infrastructure, according to Aqua Security.

While most attacks were aimed at abusing public cloud compute resources for cryptocurrency mining, the methods used open the door for higher-value targets that leverage security gaps in container software supply chains and runtime environments.

Attacks on cloud native infrastructure Container images in public registries being poisoned with Potentially Unwanted Applications that cannot be detected using static scanning.

Since the beginning of 2020, the volume of attacks has dramatically increased, suggesting that there is organized infrastructure and systematic targeting behind these attacks.

"The attacks we observed are a significant step up in attacks targeting cloud native infrastructure. We expect a further increase in sophistication, the use of evasion techniques and diversity of the attack vectors and objectives, since the widespread the use of cloud native technologies makes them a more lucrative target for bad actors," notes Idan Revivo, Head of Team Nautilus at Aqua.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/VEB9_qyj43s/