Poor Cloud Security Practices Put Organizations at Risk
Many organizations are failing to implement basic cloud security practices and address known vulnerabilities in a timely fashion, according to a new report from Palo Alto Networks’ Unit 42.
The Unit 42 Cloud Threat Report, Volume 7 details issues observed in thousands of multi-cloud environments, noting that these “gaps in security are getting more attention from threat actors.”
Findings from the report include:
- Security teams take approximately six days on average to resolve a security alert.
- 60 percent of organizations take more than four days to resolve security issues.
- 80 percent of alerts in most cloud environments are triggered by just five percent of security rules.
- 76 percent of organizations don’t enforce multi-factor authentication (MFA) for console users, while 58 percent don’t enforce MFA for root/admin users.
- Sensitive data was found in more than half of publicly exposed storage buckets.
“For threat actors, each workload in the cloud presents an opportunity, and without proper management, organizations are exposed to risk in countless ways,” the report says.
04/26/2023
