Cloud: Most businesses have a misconfiguration problem

Published February 27, 2023
Author: Ash Khan

Cloud: Most businesses have a misconfiguration problem

Published February 27, 2023
Author: Ash Khan

Many cloud problems are simple to resolve, while others are more difficult.

A recent report from the cybersecurity website has revealed that many businesses are struggling with misconfigurations in their cloud technology. This could be putting them at risk of cyberattacks and other major vulnerabilities. The study analyzed over 260 billion daily transactions across Zscaler’s platform. It found that the misconfigurations were affecting almost all businesses and posing “critical” threats to their data and infrastructure.

 

An astonishing 98.6% of businesses surveyed were found to have “concerning” cloud misconfigurations. Here it’s important to note that these misconfigurations are not necessarily vulnerabilities. Moreover, with proper care and attention, the risks can be significantly reduced.

 

One area of concern highlighted in the report was the fact that 68% of businesses surveyed had granted admin access to external users. It can also increase the risk of data exfiltration and other vulnerabilities. While this may be deliberate, it’s important for businesses to carefully consider who needs access to sensitive data and infrastructure.

Exposure of data in the cloud

The report also found that many businesses were not providing basic protection for privileged user accounts through multi-factor authentication (MFA). It leaves their user accounts vulnerable to cyberattacks. In addition, almost 60% of businesses were not implementing basic ransomware safeguards for their cloud backup and storage solutions. Although this could be a cost-cutting measure that puts them at risk and can cause costly damages.

Moreover, the report suggests that businesses can take simple steps to secure their data before investing in more expensive and sophisticated solutions. For example, businesses can start by carefully reviewing their access controls and permissions. Additionally, they can begin implementing MFA for privileged accounts, and ensuring that basic ransomware protections are in place.

 

The report highlights the need for businesses to take their cloud security seriously and invest in proper configuration and safeguards. Moreover, they should invest in reliable cloud storage and backup servicesWith the right measures in place, businesses can significantly reduce their risk of cyberattacks and other major vulnerabilities.