Cloud Threat Landscape - 2021
summary
Check Point Research claims a real fraudulent wire transfer from an email compromised on a cloud app and a public cloud infrastructure vulnerability, and shows misconfiguration as the dominant failure mode (Gartner cited ~95% now rising to 99% by 2025). Practical mitigations include enabling logging and native tools like AWS Trusted Advisor, using permission boundaries and scripting for consistency, and automating checks — cautionary build example: a templated deployment mistakenly creates hundreds of exposed storage buckets then is rolled back and remediated successfully.
AI-written summary · about
chapters (12)
- 0:00Start
- 0:412021 cloud threat landscape
- 1:44Check Point cloud security
- 3:49Cloud adoption maturity
- 10:19Developer control shifts
- 12:45Securing cloud perimeters
- 15:11Misconfiguration top threat
- 17:17IAM authorization risks
- 19:02Executive visibility concerns
- 22:50Visibility and automation solutions
- 26:17IAM best practices
- 29:23Cloud security key takeaways
related talks
45mProtecting you from you: Misconfiguration-caused breaches
40mWork Smarter Not Harder: Tips to Approach Cloud Security the Easier Way
26mCloud Security Lessons
57mCloud’s Dirty Little Secret: It Was Misconfigs All Along
58mCloud Attack Surface Management
43mClouds in the forecast: CrowdStrike cloud risk report
50mAvoiding cloud security anti-patterns the right way
18mSecuring cloud innovation: Lessons learned