Highlights From the Unit 42 Cloud Threat Report, 2H 2021
Summary: Unit 42's Cloud Threat Report for 2H 2021 examines software supply chain attacks in the cloud, citing SolarWinds and Kaseya VSA as examples of the gap between perceived and actual cloud security. In a commissioned red team exercise against a large SaaS provider's development environment, a single Unit 42 researcher found critical flaws in three days that allowed takeover of the customer's cloud infrastructure, despite what most would consider a mature cloud security posture.
Why it matters: A single researcher took over a mature SaaS provider's cloud infrastructure in three days, which is the same path attackers used against SolarWinds and Kaseya VSA - and the report notes third-party code can come from anyone, including an Advanced Persistent Threat.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026