Experts Highlight API Attacks, Cloud Ransomware and Cryptomining Risks
Summary
Cloud security experts identify API attacks, ransomware and cryptomining as key risks, and discuss safeguards including strong authorization, behavioral analytics and regular staff training.
Key points
- The experts identify API attacks as a leading concern and warn that improperly configured object-level permissions can expose APIs.
- They recommend rigorous authorization and authentication, and suggest API security tools to identify vulnerabilities and misconfigurations.
- Cloud ransomware can involve attackers creating their own security keys and locking legitimate owners out of cloud environments.
- Cryptomining malware can arrive through website code or phishing and consume cloud resources; behavioral analytics may help detect unusual use.
- The experts cite cloud skills gaps and recommend regular security training and assigning team members responsibility for specific cloud environments.
Article Details
- Topic
- Cloud security threats, including API attacks, cloud ransomware, cryptomining, and the skills gap in cloud security.
People
Vendors
Procter & GambleTo help make sense of these latest shifts, Eric Bauer, Director of Cloud Security at Procter & Gamble, recently shared his insights alongside Wiz’s Director of Data and Threat Research, Alon Schindel. WizTo help make sense of these latest shifts, Eric Bauer, Director of Cloud Security at Procter & Gamble, recently shared his insights alongside Wiz’s Director of Data and Threat Research, Alon Schindel.