Public cloud infrastructure presents security teams with a new invisible management layer. Many organizations don’t properly understand the cloud identity and access management layer and often fail to secure it. Current security practices and controls are not sufficient to mitigate the risk posed by misunderstanding of the public cloud. Traditional protections primarily focus on network, application, and operating system defense. Attackers don’t need to be sophisticated to take advantage of public cloud APIs, researchers say. They plan to demonstrate an alternative new approach to attacking cloud infrastructure in a talk titled “Inside Out The Cloud Has Never Been So Close””]
Source: https://www.darkreading.com/cloud/researchers-find-new-approach-to-attacking-cloud-infrastructure