Security News > 2022 > June > Cloud computing top concerns: The focus is shifting

The Cloud Security Alliance released the Top Threats to Cloud Computing: The Pandemic 11 report, which found a marked change in what cloud security provider security issues are seen as concerning.

New, more nuanced items, such as configuration and authentication, suggest both that consumers' understanding of the cloud has matured, and signals a technology landscape where consumers are actively considering cloud migration.

Respondents indicated topics such as control plane weaknesses, metastructure and applistructure failures, and limited cloud visibility as top concerns - a marked departure from more generic threats, risks, and vulnerabilities that featured more strongly in previous Top Threats reports.

Other top threats in this year's survey highlight lack-of-control type hurdles that users may experience with CSPs, such as limited cloud usage visibility and a weak control plane, which can lead to data breaches or leaks beyond the traditional landscape.

"Collectively, these security issues are a call to action for developing and enhancing cloud security awareness, configuration, and identity management. As cloud business models and security tactics evolve, there is an even greater need to address security issues that are situated higher up the technology stack and are the result of senior management decisions," said Jon-Michael C. Brook, co-chair, Top Threats Working Group, and one of the paper's lead authors.

"Considering that user interfaces and APIs are the modern way to consume services, it's concerning that there are still significant challenges when it comes to securing these features. The cloud - with its complexity - is also the perfect place for attackers to hide and an ideal launchpad for attacks. Add to that the fact that insider threats make it more challenging to protect organizations from data loss and it becomes clear that more industry attention and research is required," said John Yeoh, Global Vice President of Research, Cloud Security Alliance.

News URL

https://www.helpnetsecurity.com/2022/06/15/csp-security-issues/