Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Unit 42 Cloud Threat Report Update: Cloud Security Weakens as More Organizations Fail to Secure IAM

Summary: Unit 42 researchers found cloud environments were more susceptible to attack between January and June 2021 than in October 2020, citing increases in organizations that did not enable MFA, failed to rotate access keys, or used overly permissive service accounts. The report notes a roughly 20% global increase in organizations failing to rotate access keys across Google Cloud and AWS, a 17% rise in overly permissive Google Cloud IAM service accounts, and a 60% increase in publicly accessible Google Cloud storage resources, while overly privileged AWS AssumeRole configurations fell 67%.

What you should know: A compromised CSP root account can circumvent any security measure an organization's identity provider puts in place, and Microsoft found the rate of compromise for accounts using any type of MFA is less than 0.1% of the general population. With IDC projecting 90% of enterprises will rely on cloud infrastructure for production by 2022, the access keys left unrotated past 90 days are the ones an attacker inherits.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Cloud Security
Related