Security News > 2021 > July > 36% of organizations suffered a serious cloud security data leak or a breach in the past year

As cloud adoption accelerates and the scale of cloud environments grows, engineering and security teams say that risks-and the costs of addressing them-are increasing.
The survey of 300 cloud pros found that 36% of organizations suffered a serious cloud security data leak or a breach in the past 12 months, and eight out of ten are worried that they're vulnerable to a major data breach related to cloud misconfiguration.
"The adoption of IaC is a double-edged sword, it puts cloud infrastructure into the hands of developers, but also opens organizations to serious risk associated with misconfiguration." said Matt Howard, EVP, Sonatype.
Traditional security challenges play a significant role in cloud security, such as alert fatigue and false positives, and human error.
The demand for cloud security expertise continues to outpace supply; 36% cite challenges in hiring and retaining the cloud security experts and 35% cite challenges sufficiently training their cloud teams on security.
The adoption of IaC presents cloud teams with the opportunity to check configurations pre-deployment, with half of the teams surveyed investing 50+ engineering hours per week on IaC security.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/xHA2t1NkFY4/
Related news
- CISA warns of increased breach risks following Oracle Cloud leak (source)
- Ransomware spike exposes cracks in cloud security (source)
- The cloud security crisis no one’s talking about (source)
- Skyhawk Security brings preemptive cloud app defense to RSAC 2025 (source)
- Microsoft Warns Default Helm Charts Could Leave Kubernetes Apps Exposed to Data Leaks (source)
- Qilin Ransomware Ranked Highest in April 2025 with 72 Data Leak Disclosures (source)
- Twilio denies breach following leak of alleged Steam 2FA codes (source)
- New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer Policy (source)
- Closing security gaps in multi-cloud and SaaS environments (source)
- AI forces security leaders to rethink hybrid cloud strategies (source)