Security News > 2021 > February > New cloud security analysis finds default configurations and identity management are the biggest concerns

A new analysis of security risks in cloud deployments found that companies are facing an increased risk of more advanced attacks and struggling to control managed infrastructure options.
The Cloud Cyber Resilience Report from Accurics describes how insecure defaults and identity management are causing new problems.
When the infrastructure as code used to provision cloud components or a runtime configuration deviated from a security policy, that was considered a violation.
Default configurations in managed services offerings are a growing security risk.
The report authors said that this was the first time that the analysts had seen identity and access management defined through infrastructure as code in production environments.
The analysts recommend addressing identity management in the short term to avoid having to manually manage identities in runtime or compromise the security of their systems.
News URL
Related news
- Balancing cloud security with performance and availability (source)
- Avoiding vendor lock-in when using managed cloud security services (source)
- Why multi-cloud security needs a fresh approach to stay resilient (source)
- Cloud security gains overshadowed by soaring storage fees (source)
- Google Acquires Wiz for $32 Billion in Its Biggest Deal Ever to Boost Cloud Security (source)
- Google to purchase Wiz for $32 billion in cloud security play (source)
- Cloud security explained: What’s left exposed? (source)
- Oracle Cloud security SNAFU latest: IT giant accused of pedantry as evidence scrubbed (source)
- How CISOs can balance security and business agility in the cloud (source)
- Cloud providers aren’t delivering on security promises (source)