CrowdStrike report finds 95% increase in cloud exploitation cases in 2022, with Chinese cyberespionage groups leading the charge

I’m sure I will have more security to cover this week.  I didn’t want a CrowdStrike report to get stale or miss the warning.

Threat actors are increasingly targeting cloud services and moving beyond malware to conduct digital operations, according to a report by the cybersecurity company CrowdStrike.

The firm found that “the number of observed cloud exploitation cases grew by 95% year-over-year in 2022,” with threat actors using a broad array of [tactics, techniques, and procedures] such as misconfigurations, credential theft, and the like to compromise critical business data and applications in the cloud.

Cyberespionage groups affiliated with the Chinese government account for a growing share of these overall attacks.

That means attacks exploiting cloud systems nearly doubled in 2022, and the number of hacking groups that can target the cloud tripled last year.

Yesterday I mentioned the changes n the type of management products to consider for the future… well, here’s why.    The needs of the cloud are different from those of on-prem, and the threats are too.      The enemy is getting smarter, so factor that into your plans.