In this era of increasing technological complexity, watering hole attacks build on a model of simplicity. As cloud technologies become more varied and omnipresent, we’re going to see a higher rate of full-on attacks. As more ICS environments head for the clouds, we see a greater decentralization of potential risks. The best way to protect yourself is by implementing multiple layers of security, starting with policy, codified into all of the cloud stack codified and fixing misconfigurations before cloud infrastructure is provisioned.
Source: https://www.helpnetsecurity.com/2021/04/08/cloud-native-watering-hole-attack/