IAM Your Defense Against Cloud Threats: The Latest Unit 42 Cloud Threat Research
Summary: Unit 42 analyzed more than 680,000 identities across 18,000 cloud accounts from 200 organizations and found that nearly all of them lacked the proper IAM management policy controls to remain secure. The report defines a new category, cloud threat actors, as individuals or groups posing a threat through directed and sustained access to cloud platform resources, services or embedded metadata, and says these actors use cloud-specific tactics such as performing lateral movement and privilege escalation simultaneously.
Key Takeaway: Attackers who find overly permissive IAM policies do not need a technically complex compromise - they gain access to resources as if they have a right to them, and Unit 42 found this condition in nearly every one of the 200 organizations it examined.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026