Unit 42 Unveils Most ‘Expansive’ Cloud Threat Research Yet: Cloud Threat Report Volume 7 Examines the Expanding Attack Surface
Summary: Unit 42's Cloud Threat Report Volume 7 analyzed workloads in 210,000 cloud accounts across 1,300 organizations using 2022 data, finding threat actors exploiting everyday cloud issues such as misconfigurations, weak credentials, lack of authentication, unpatched vulnerabilities and malicious open source packages. The report includes two anonymized 2022 cloud breach incident response cases illustrating attackers using sensitive data leaked on the dark web and business disruption caused by ransomware.
Bottom line: The report points to ready-to-use templates and default configurations from cloud service providers as a source of exposure, not just user error - meaning some of the gaps in your cloud estate arrived with the platform itself. Gartner's 70% jump in CNAPP client inquiries from 2021 to 2022 signals peers are already re-examining how they cover that surface.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026