Threat intelligence firm ReliaQuest is seeing more cloud attacks traced back to “identity-related weaknesses” such as excessive permissions, misconfigured roles and credential abuse, Infosecurity Magazine reports. The report found credentials for cloud services are easily sold on the dark web and allow hackers to gain access to accounts without arousing suspicions. ReliaQuest suggested organizations should use short-term credentials for services like AWS, create policies to reduce privileges and automate security checks through tools like static analysis to prevent vulnerabilities and misconfigurations.
Full story