THREAT MODELLING CLOUD SERVICE PROVIDERS IN 2025

Summary from the TLDR InfoSec newsletter

This post examines the threats posed by government pressure on cloud service providers. The simplest attack vector is for the government to force a cloud provider to deplatform an organization, resulting in a denial of service. Another vector involves the government violating confidentiality by compelling the provider to release sensitive information. This risk can be mitigated by storing critical data on-premises or using confidential computing architecture.