Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Unit 42 Cloud Threat Report: Spring 2020

Summary: Unit 42's Spring 2020 Cloud Threat Report, drawing on public and Palo Alto Networks proprietary threat intelligence, found that DevOps teams create Infrastructure-as-Code templates through a three-step design, code, and deploy process that omits security scanning. The report states that IaC's ability to enforce security standards systematically remains largely unharnessed, raising the likelihood of exploitable cloud vulnerabilities.

What you should know: The report recommends scanning every IaC template pulled from public repositories like GitHub for vulnerabilities within the CI/CD pipeline, a check it says is currently overlooked as teams shorten time to production.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Detection & Response
Related
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026