Extreme TLDR Summary:
Insikt Group's report highlights escalating cloud threats, focusing on exploitation, misconfiguration, and credential abuse. Attackers exploit weak cloud services and credentials for broad victim access, using built-in functions for malicious actions. Key trends include registered cloud resources for attacks, diminishing DDoS effectiveness, and targeting AI services. Cloud misconfigurations remain a significant risk. Prevention requires maintaining service inventories, enforcing access controls, and patching vulnerabilities, especially as cloud environments evolve rapidly, increasing potential entry points for attackers.
https://www.recordedfuture.com/research/2025-cloud-threat-hunting-defense-landscape