Cord CheckAmazon USReplace worn cables before they cause problemsCompare durable charging cables and adapters that hold up to daily commuting and travel.See PicksSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowApple ArrivalAmazon USPair practical accessories with the newest Apple lineupCases, charging gear, screen protection, and watch bands for shoppers settling into a new device.Compare Now×
Skip to content
THEGEEKSCLUB

Rounding up the 2019 CSA Report on top Cloud Security Threats

Abstract security cloud technology background, key lock and could technology background, Vector Illustration

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Organizations are increasingly moving to the cloud, and many organizations have adopted multi-cloud infrastructures. As ever-growing amounts of sensitive data and functionality move to the cloud, cloud security becomes more and more vital to an organization’s cybersecurity.

The Cloud Security Alliance has recently released its 2019 list of the top threats to cloud security. This year, the CSA points to eleven “egregious” threats to organizations’ cloud security.

#1. Data Breaches

Unsurprisingly, the top security issue associated with the cloud is the data breach. As organizations move increasing amounts of sensitive and valuable data to the cloud, these cloud deployments become a target for cybercriminals. Since many cloud deployments are poorly secured, breaches of sensitive data stored in the cloud have become common.

#2. Misconfiguration and Inadequate Change Control

Misconfiguration issues are the leading cause of cloud data breaches. Cloud environments differ greatly from on-premises deployments, and organizations moving sensitive data storage to the cloud commonly fail to properly configure the security settings provided by their cloud service provider (CSP). As a result, sensitive data is exposed to anyone who knows where to look.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Shopping ad
Sale
FYY Electronic Organizer, Travel Tech Pouch Bag, Cable Organizer Black
  • Dimensions: 7.5" x 4.3" x 2.2". Compact size and lightweight make it easy to carry and put into your backpack, handbags or laptop bag without taking much space. Suitable for family use and daily organization. Note: Small mesh pockets are ideal for charging cords no longer than 3ft; longer cables (over 3ft) fit better in the larger compartments
  • Quality Material: This electronic organizer travel case made of high quality durable waterproof oxford and soft sponge inside to secure your gadgets in place and deliver a quick access whenever you want. Water-resistant fabric protects your gear from unexpected splashes, keeping all your electronic essentials safe and secure
  • Double Layers Design: This tech pouch features a double-layer interior design with 8 compartments, including multiple see-through mesh pockets and ample space to store your cords, cables, USB drives, cellphone, charger, mouse, flash drive and more, keeping all accessories neatly organized and tangle-free
  • Practical and Convenient: Comes with a comfortable hand strap for easy carrying; You may carry it in your hand when heading out. Durable and smooth zipper closure keeps your favorite device securely, convenient for you to have quick access to the items inside the case
  • Portable and Lightweight: The small size and lightweight design durable cable organizer pouch is a perfect choice when going on holiday, business trip, travel, office. Enjoy hassle-free travel without wasting time on tangled accessories. Great gift for yourself also a nice share with families and friends. (No include cords, electronic accessories)

#3. Lack of Cloud Security Architecture and Strategy

When moving operations to the cloud, many organizations assume that their existing security tools, policies, and procedures will work the same as with on-premises deployments. However, the nature of the cloud means that organizations have reduced visibility into their infrastructure and must configure cloud-specific security controls provided by their CSP. A failure to develop a cloud-specific security strategy increases the probability that crucial controls and configuration settings will be overlooked, opening up the organization to attack.

#4. Insufficient Identity, Credential, Access and Key Management

Shopping ad
Ordilend Keyboard Cleaner & Laptop Cleaning Kit, All-in-1 for Computer PC
  • 【UPGRADED LAPTOP CLEANING KIT 】 The macbook cleaning kit computer screen cleaner comes with a number of accessories including a retractable large brush, polishing cleaning cloth X 2, keycap puller, metal pen tip, flocking sponge, thin soft brush, soft plastic lens cleaning pen, 5 replacing cloth, large cleaning microfiber cloth. You deserve the comprehensive computer cleaning kit keyboard vacuum at a low cost
  • 【PROFESSIONAL KEYBOARD CLEANING KIT】 The laptop screen cleaner keyboard cleaner can pull out the keycaps of gaming keyboards and mechanical keyboards. A retractable keyboard brush works on laptops and keyboards, while the mini high-density brush is great for deep cleaning between keys for cleaning between flatter keys on a laptop, the metal pin tip gently removes any stains. This electronic cleaning kit macbook cleaner totally meets professional cleaning needs
  • 【OFFICE DESK ACCESSORIES】This keyboard cleaner kit is easy to use and can clean your keyboard and electronic screen with just one swipe. Wiping with the 2mm thicken widen polishing cleaning cloth designed at a right angle for better fitting screen corners of computers with our recyclable cleaning spray, The laptop cleaner kit for macbook effectively absorbs stubborn stains, leaves no discoloration, no streaks, and no fiber shedding on the screens
  • 【MULTIFUNCTIONAL TOOLS 】Mini soft brush and soft plastic lens cleaning pen are specially designed for DSLR camera screen, lens, and other delicate surfaces. 5 more cleaning cloths of it supplied for replacement. The flocking sponge is an excellent tool for cleaning earbuds charging cases, And the earbud cleaning kit is ideal. This electronics for college students is equivalent to 10 other electronic cleaning kit
  • 【PORTABLE DESIGN & CLEANER TOOL】 The office supplies is compact in design, easy to carry, and you can easily take it anywhere. It's convenient to keep one in a drawer, one in your car, or in your bag and dorm. It is easy to use and can clean your keyboard and electronic screen with just one swipe. Is the college essentials cleaning tool for your friends, family, colleagues and students

The cloud is designed to be more accessible than an on-premises deployment. It lies outside of the organization’s network perimeter and is directly accessible from the Internet. As a result, access management on cloud deployments is even more important than for on-premises systems. Stolen or guessed user credentials can be used to gain direct access to cloud resources without passing through the organization’s network. A failure to implement strong access control and multi-factor authentication leaves organizations’ cloud resources wide open for an attacker.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

#5. Account Hijacking

On the cloud, cloud service accounts and subscriptions have elevated permissions. An attacker who gains access to the credentials for these accounts may have full control over the applications and data contained within an organization’s cloud deployment.

As a result, these account credentials have become a common target for phishing attacks and attempted credential theft. If these attacks are successful, an account without multi-factor authentication enabled is completely under the attacker’s control.

Shopping ad
Sale
BAGSMART Large Electronic Organizer Travel Case for Tech Accessories, Black
  • Compatible Space: This electronics organizer bag features 2 zippered mesh pockets fits phones, standard power banks, 4 elastic loop pouches for small items, 2 elastic loop pouches for wireless headphones and small chargers. Elastic loops for phone charging cable. And specific slots for SD cards. Please check the size to ensure it meets your needs
  • Lightweight Travel Accessories: The size of the electronic organizer travel case is 10.6" L x 7.5" W x 1.2" H, Compact but substantial size fits your intended bag or space. Suitable for traveling use and daily organization
  • Keep Everything Organized: This compact travel organizer features dedicated compartments for your phone charger, cables, and tech accessories, keeping them tangle-free and ready to go. You can find travel accessories quickly, no chasing cords in your pack anymore
  • Durable Travel Essentials: Features double zippers for easy access, elastic loops with non-slip grips for daily protection. Organizer for office use and traveling, (Not including cords, electronic accessories). It can serve as a travel checklist. Before you leave a place, just open the case and check if everything is there, preventing you from leaving things behind
  • Versatile Use: Its practicality and convenience make it a travel essential bag. It is suitable for a weekend trip, business trip, and travel. This organizer pouch is suitable for office, business, daily use and can be given as a gift for friends, family, or men, for birthdays, Valentine's Day, Christmas Day, Father's Day

#6. Insider Threat

58% of cloud security incidents are attributed to insider threats. In most cases, an employee is not acting out of malice but exposes the organization to attack through negligence. A common example of a security incident caused by employee negligence is setting a cloud deployment to “public” to remove the burden of explicitly providing access on an individual basis. This action makes the cloud resource available to anyone with the URL, and tools exist for scanning the Internet for these vulnerable deployments.

#7. Insecure Interfaces and APIs

Like all APIs, cloud APIs are designed to expose the inner functionality of a system to allow users to interact with it with minimal overhead. Failure to properly secure API access can leave a system open to attack as unauthorized users can perform bulk data collection or force the system to perform privileged or expensive operations.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

#8. Weak Control Plane

The control plane in the cloud is designed to provide the cloud deployment’s owner with complete control over the operations of the cloud deployment. If an organization deploys cloud resources with a weak or non-existent control plane, then they do not have complete control over its operations.

Shopping ad
ColorCoral Cleaning Gel Universal Dust Cleaner for PC Keyboard Car Detailing Office Electronics Laptop Dusting Kit Computer Dust Remover, Computer Gaming Car Accessories, Gift for Men Women 160g
  • Universal fit: ColorCoral cleaning gel, simple and convenient cleaning kits for PC/laptop keyboard and other rugged surface, such as the car vent, camera, printer, telephone, calculator, Instrument, speaker, air conditioner, TV and other appliances
  • Safe cleaning gel: The keyboard cleaner gel is made from natural gel, no sticky to hands, smells sweet with lemon fragrance, no stimulation to skin
  • Easy dust cleaning: Make sure your hands are dry and clean, knead the cleaning gel into a ball, press the cleaning gel slowly into the keyboard, car vent and rugged surface till the cleaning gel could touch the bottom and then pull out, the dust would be carried away with the cleaning gel
  • Reusable: The keyboard cleaning gel could be used repeatedly till the color turn to dark or it become sticky, then you have to replace the cleaning gel with a new one. After cleaning, please stock the cleaning gel in cool place. (Note: Don’t wash the gel in water.)
  • In the package: 1 can of universal cleaning gel, we provide the cleaning gel with brand new, if you find the package broken, the cleaning gel dirty, or any other quality issues, please email us through message, we provide you new one soon

#9. Metastructure and Applistructure Failures

The cloud metastructure or “waterline” is the place where the CSP’s responsibility for the infrastructure ends and the customer’s role begins. Many CSPs will provide customers with APIs to collect security data at this point to help fulfill their part of securing their cloud deployment.

Failures at this level can be caused by both parties. A CSP who does not properly secure API functions may be leaking sensitive information. A client who does not design their applications and security infrastructure for the cloud may not take advantage of this data and miss important security alerts.

#10. Limited Cloud Usage Visibility

This threat arises when an organization does not have complete visibility into the operations being performed on their cloud deployment. Legitimate users may be using unauthorized applications on an organization’s cloud deployment (aka shadow IT). Alternatively, legitimate applications may be used in malicious ways (i.e. SQL injection on legitimate databases). The inability to identify this misuse of cloud resources opens up an organization to attack.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Shopping ad
Sale
HOTO Pocket-Size Laser Measuring Tool, EDC Gadget Birthday Gift for Men Dad
  • Award-Winning Compact Design & EDC-Ready Gift Choice: Weighing only 0.09 lb and sized like a credit card, this compact laser measure is designed for everyday carry. It slips easily into a pocket, tool pouch, or bag, and can attach to a keychain for quick access wherever you go. Its minimalist design, premium tactile finish, and practical one-button measuring make it a useful EDC gadget for DIYers, real estate agents, homeowners, and tech enthusiasts. A thoughtful gift for men on any occasion
  • One-Button Easy Measuring, Simple to Use: Designed with simple one-button operation, this compact laser tape measure makes quick measuring easy without complicated controls. Just press to measure room dimensions, furniture spacing, window height, wall décor placement, and everyday distances around the home. Ideal for users who want a smart, pocket-size measuring tool that fits naturally into an everyday carry (EDC) setup and feels intuitive, modern, and easy to use
  • Fast & Accurate Indoor Measurements with Class 2 Laser: Measure distances from 0.16 ft to 98 ft with up to ±1/16 in / ±2 mm accuracy. With quick measurement response in about 0.2 seconds, HOTO helps you check spaces efficiently for home renovation, furniture layout, moving, decorating, craft projects, and DIY planning. Built with a Class 2 laser for everyday indoor measuring; use as directed and avoid direct eye exposure
  • Low-Power OLED Display & USB-C Rechargeable Convenience: The low-power OLED display provides clear indoor readings while helping reduce battery drain. With USB-C rechargeable design, auto shut-off, and up to 1000 measurements per charge, this digital laser measure is built for repeated daily use without frequent battery replacement. Compact enough to keep in a drawer, toolbox, bag, or pocket
  • Useful for Home, Work & Everyday Projects: From home renovation and furniture measuring to room planning, real estate checks, interior design, and light construction projects, this pocket-size laser distance measure is made for practical everyday use. Compact enough to keep in a drawer, toolbox, bag, or pocket, it is a stylish measuring tool that feels just as giftable as it is useful

#11. Abuse and Nefarious Use of Cloud Services

Cybercriminals are increasingly using cloud infrastructure to launch their attacks. Since these attacks come from the CSP’s domain, they may seem legitimate. Organizations need to deploy security solutions capable of looking past domain names and identifying whether traffic is benign or malicious.

Securing the Cloud

Most cloud security threats arise from a failure to use tools and processes designed to secure the cloud. By deploying cloud-specific security solutions, an organization can achieve the visibility and control necessary to secure their cloud investment.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi
Author (33)
Written by

Mary James

Mary holds a degree in Journalism from Columbia University. With more than 10 years of editorial experience, she has worked with a numerous tech blogs. Outside of the newsroom, she enjoys traveling, photography, and reading history. At The Geeks Club, she leads the editorial strategy and contributes long-form how-to articles.

More from this author ↗
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.