Loading story…
Fortinet survey findings reported by TechRadar and CIO indicate that expanding hybrid and multi-cloud adoption—often tied to broader AI initiatives—is widening organizations’ cloud attack surfaces while security operations struggle with tool sprawl and limited end-to-end visibility. The research reports 88% of organizations operate hybrid or multi-cloud environments, and 81% rely on two or more cloud providers for critical workloads, increasing complexity across identities, permissions, configurations, and data paths.
The survey highlights persistent capability gaps: 69% cite cloud security barriers driven by tool sprawl and visibility gaps, and 59% say their cloud security maturity remains in early/developing stages. Confidence in real-time detection and response is weak (66% lack strong confidence), and automation is largely limited to alerting, with only 11% reporting autonomous remediation. The top anticipated risk areas are identity and access management (77%), misconfigurations/cloud security posture (70%), and data exposure (66%); Fortinet also notes cloud incidents often result from chained weaknesses along an “exposure path” (e.g., misconfiguration plus excessive privileges leading to sensitive data access). Despite these gaps, 62% expect cloud security budgets to increase, averaging 34% of IT security budgets, with Fortinet recommending unified visibility, tool consolidation, connecting risk domains, and greater automation to reduce operational burden and improve response.
Map this exposure pattern across your cloud, code, and identities.
2 events from the most recent confirmed update back to the earliest known activity.
SC Media reported on Fortinet's findings that tool sprawl, limited visibility, and low confidence in real-time detection and response are hindering cloud security. The coverage emphasized that automation remains mostly limited to alerting and that integrated platforms and stronger automation are needed as cloud attack surfaces expand.
Fortinet reported that organizations are increasing cloud security investment, with many expecting budget growth, but 59% still rate their cloud security maturity as only early or developing. The findings also highlighted widespread hybrid and multi-cloud use, tool sprawl, visibility gaps, and leading risks around identity and access, misconfigurations, and data exposure.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Recorded Future’s Insikt Group assessed the **cloud threat hunting and defense landscape** and highlighted **misconfigurations** and **vulnerability exploitation** as persistent, high-commonality risks in cloud environments. The report notes that misconfigurations are frequently exploited for initial access and privilege expansion, while cloud environments also inherit vulnerability exposure from embedded third-party technologies; it further argues that the business impact of cloud exploitation is not always directly proportional to exploitability, and that risk evolves as cloud services and configurations change. An SC Media commentary on multi-cloud security similarly emphasizes that **multi-cloud adoption increases complexity and reduces centralized control**, creating security gaps such as configuration drift, fragmented visibility across provider consoles, and inconsistent policy enforcement. It also points to expanded attack surfaces via multiple entry points and API interconnections, plus fragmented compliance due to data residency and differing regulatory mandates—conditions that can increase incident likelihood even without a single discrete breach or vulnerability disclosure.
Jun 29, 2026
Security teams continue to face elevated risk from **network edge device vulnerabilities** and legacy/slow-to-patch infrastructure, with threat actors actively exploiting exposed perimeter systems and benefiting from limited vendor cooperation and uneven firmware update practices. Discussion also highlighted defensive approaches aimed at improving early warning and containment—particularly stronger monitoring/detection around edge assets and the use of deception mechanisms such as **canary tokens** to surface exploitation attempts sooner. Separately, security operations practitioners are emphasizing that many organizations are effectively **“flying blind”** due to incomplete or provider-controlled logging in cloud/SaaS environments, which can undermine detection engineering and incident response when platforms change telemetry or access patterns. The coverage also pointed to emerging efforts to benchmark **LLMs for defensive SecOps workflows** and shared practitioner perspectives on how large platforms (e.g., Reddit) approach threat detection, reinforcing that visibility and measurable detection capability are central constraints even when tooling and automation improve.
Jun 29, 2026
A *Panorays* survey of 200 U.S. CISOs reported rising **third-party security incidents** alongside major visibility gaps across extended vendor ecosystems. In the findings cited by Help Net Security and SC Media, **60%** of CISOs said third-party incidents increased over the past year, while only **15%** said they have full visibility into third-party risk across deeper supply-chain tiers (third-, fourth-, and beyond). The reporting emphasizes that vendor dependencies now span core functions (cloud, software development, data processing, and AI services), expanding attack surface and enabling attackers to exploit less-monitored downstream relationships such as subcontractors and affiliates. The survey also pointed to weak preparedness and governance as compounding factors: while **77%** of CISOs view third-party risk as a major threat, only **21%** reported having tested crisis response plans, and only **41%** monitor risk beyond direct suppliers. Both articles highlight **unmanaged/“shadow” AI tools** as an emerging third-party risk driver, with only **22%** of organizations having formal AI vetting processes and **60%** of respondents identifying shadow AI as uniquely risky—creating new, poorly understood pathways for supply-chain compromise and regulatory exposure.
Jun 29, 2026