Companies missing security in rushed cloud adoptions
Cybersecurity Dive
Samantha Schwartz
Dive Brief:
-Since March 2020, security incidents rooted in disabled encryption in SQL databases increased 212%, according to Palo Alto Networks' Unit 42 1H 2021 Cloud Threat Report, released Tuesday. Unit 42 determined security teams were "not using [infrastructure as code] at all" or missing vulnerabilities.
-More than one-third of global businesses have internet-accessible cloud storage. The configuration is justified in some cases, but Unit 42 found 30% of those businesses store sensitive or personally identifiable information (PII) in internet-facing cloud storage. The exposed sensitive data was of note to researchers as "anyone who knows the right URLs can access the data without passwords or other authentication," the report said.
-Ninety-three percent of malware found in cloud storage is in...