Cloud Security Statistics & SaaS Security Insights 2025 | Qualys
Summary: A Dark Reading and Qualys study of more than 100 security and IT practitioners found that 28% of organizations suffered a cloud- or SaaS-related data breach in the past year, and 36% of those affected had multiple breaches. The research attributes the top risk to human error at 30%, cites a misconfigured AWS S3 bucket that exposed 4,600 passport scans, and reports that 99% of virtual machines are non-compliant for MFA delete on critical AWS S3 buckets.
Key Takeaway: More than 1 in 4 enterprises were breached through cloud or SaaS in a single year, and more than a third of those hit were hit again - while 99% of the VMs measured fail a basic S3 MFA delete control, so the exposure is already sitting in most environments.
Read the original at Qualys Blog ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026The Last List of 2009 - Predicting Security in 2010 Cyber Risks ·