STATE OF CLOUD SECURITY

Summary from the TLDR InfoSec newsletter

A report from Datadog analyzing the security posture data from a sample of thousands of organizations using AWS, Azure, or Google Cloud found that many cloud workloads are excessively privileged. Specifically, long-lived credentials, MFA for cloud access, and IMDSv2 are not sufficiently enforced.