Unit 42 Cloud Threat Report: CSP Findings on Logging, Encryption and Exposed Services
Summary: Unit 42 researchers analyzed data from AWS, Azure and Google Cloud between May and August 2020 and found that 73% of organizations using Azure Storage containers and 71% using AWS S3 buckets do not enable logging, while 63% of AWS users do not track changes to their S3 buckets and only 33% enable encryption within them. EMEA organizations had the highest share of unencrypted S3 buckets at 73% (JAPAC 72%, Americas 66%), and 39% of EMEA organizations allow unrestricted inbound traffic into their cloud environments, versus 38% in the Americas and 37% in JAPAC.
What's compelling: With roughly seven in ten storage deployments running without logging, an organization cannot see who accessed or manipulated the data in its buckets, and the report ties missing encryption to exposures including 3.1 million medical patient records and 5.5 million files leaked from cybersecurity firms, universities and insurance companies.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026