cxo voice
  • Home
  • Technology
    • AI
    • Cloud
    • Telecom
    • Data Center
    • BPM
    • Blockchain
  • Finance
    • Banking
  • Cyber Security
  • View Points
  • Leaders Talk
  • News
  • Press Release
    • Submit Press Release
No Result
View All Result
  • Home
  • Technology
    • AI
    • Cloud
    • Telecom
    • Data Center
    • BPM
    • Blockchain
  • Finance
    • Banking
  • Cyber Security
  • View Points
  • Leaders Talk
  • News
  • Press Release
    • Submit Press Release
No Result
View All Result
Leaders Talk and Latest Tech News | CXO VOICE
No Result
View All Result
Home News Cyber Security

Data in the Cloud is More at Risk Than Organizations Think : McAfee Report

Deepa Sharma by Deepa Sharma
October 30, 2018
data in the cloud

McAfee, at its Asia Pacific MPOWER Cybersecurity Summit released its Cloud Adoption and Risk Report, analyzing billions of cloud events to assess the current state of cloud deployments and to uncover the risks. Enterprises everywhere take advantage of cloud for speed, scale, increased agility and collaboration. This new report echoes the fact that it is all too easy to neglect securing data in the cloud, and as a result it is much more exposed than organizations may think.

Report shows only one-fourth of data in the cloud puts organizations at high risk if it is stolen or leaked. Coupled with the fact that sharing sensitive data in the cloud has increased 53 percent year-over-year.

The study found that while organizations aggressively use the public cloud to create new digital experiences for their customers, the average enterprise experiences more than 2,200 mis-configuration incidents per month in their infrastructure-as-a-service (IaaS) and platform-as-a-service (PaaS) instances.

Cloud service providers only cover the security of the cloud itself, not customer data or customer use of their infrastructure and platforms. Companies are always responsible for securing their data wherever it is, hence highlighting the need to deploy cloud security solutions that span the whole cloud spectrum, from SaaS (software-as-a-service) to IaaS and PaaS.

“Operating in the cloud has become the new normal for organizations, so much so that our employees do not think twice about storing and sharing sensitive data in the cloud,” said Rajiv Gupta, senior vice president of the Cloud Security Business, McAfee.  “Accidental sharing, collaboration errors in SaaS cloud services, configuration errors in IaaS/PaaS cloud services, and threats are all increasing. In order to continue to accelerate their business, organizations need a cloud-native and frictionless way to consistently protect their data and defend from threats across the spectrum of SaaS, IaaS and PaaS.”

Cloud Collaboration a Blessing and a Curse:

Cloud services bring a momentous opportunity to accelerate business through their ability to quickly scale, allowing businesses to be agile with their resources and provide new opportunities for collaboration. Cloud services like Box and productivity suites like Office 365 are used to increase the fluidity and effectiveness of collaboration. However, collaboration means sharing, and uncontrolled sharing can expose sensitive data. Findings demonstrate that:

  1. Twenty-two percent of cloud users share files externally, up 21 percent YoY
  2. Sharing sensitive data with an open, publicly accessible link, has increased by 23 percent YoY
  3. Sensitive data sent to a personal email address also increased by 12 percent YoY

To secure sensitive data in cloud storage, file-sharing and collaboration applications, organizations must first understand which cloud services are in use, hold their sensitive data, and how that data is being shared and with whom.

ADVERTISEMENT

Once organizations have gained this visibility, they can then enforce appropriate security policies to prohibit highly sensitive data from being stored in unapproved cloud services and provide guardrails that prevent non compliant sharing of sensitive data from approved cloud services, such as when data is shared with personal email addresses or through an open, public link.

IaaS and the Risks of Misconfiguration:

With SaaS, securing data, user identity and access to data is primarily the customer’s responsibility. With IaaS, customers take on a much larger share of security responsibility that includes data, identity, access, applications, network controls and host infrastructure. While this provides customers with an opportunity to have greater control over their cloud infrastructure, it also increases the organization’s surface area for security risks and their responsibility for the same.

IaaS providers, like Amazon Web Services (AWS), provide several infrastructure and platform services, each having deep and complicated security settings. Magnifying the IaaS/PaaS security challenge is the fact that organizations use multiple IaaS/PaaS vendors running several instances of each vendor’s product. Research found that:

  1. Ninety-four percent of IaaS/PaaS use is AWS, but 78 percent of organizations using IaaS/PaaS have both AWS and Azure
  2. Enterprise organizations have an average of 14 misconfigured IaaS/PaaS instances running at one time, resulting in over 2,200 individual misconfiguration incidents per month
  3. Five-and-a-half percent of AWS S3 buckets have world read permissions, making them open to the public

McAfee recommends that organizations continuously audit and monitor their AWS, Azure, Google Cloud Platform and other IaaS/PaaS configurations as a standard security practice, while protecting data stored in IaaS/PaaS platforms. IaaS/PaaS use is growing rapidly as an alternative to on-premises data centers.

Businesses need to get ahead and address their security responsibilities—data protection and threat defense as they would for SaaS cloud services and also configuration compliance and workload protection for IaaS/PaaS cloud services—before they experience a security incident.

Compromised Accounts and Insider Threats:

Most of the threats to data in the cloud result from compromised accounts and insider threats. The average organization generates over 3.2 billion events per month in the cloud, of which 3,217 are anomalous behaviors and 31.3 are actual threat events. In addition:

  1. Threat events in the cloud, such as a compromised account, privileged user, or insider threat, have increased 27.7 percent YoY
  2. Eighty percent of all organizations experience at least one compromised account threat per month
  3. Ninety-two percent of all organizations have stolen cloud credentials for sale on the Dark Web
  4. Threats in Office 365 have grown by 63 percent YoY

To get ahead of comprised accounts and insider threats, organizations should understand how cloud services are used. They should also identify anomalous behavior, such as when the same user accesses the cloud from disparate locations simultaneously, which could indicate a compromised account threat.

As a first step towards protecting data in the cloud, cloud access security brokers (CASB) should be implemented. CASBs are cloud-native services that enforce security, compliance and governance policies for cloud services. They help organizations leverage and extend their existing security controls where appropriate and define and deploy new cloud-native ones where appropriate to enable enterprises to consistently protect their data and defend from threats across the spectrum of SaaS, IaaS and PaaS.

Key Findings of Macfee Cloud Adoption and Risk Report:

  1. Twenty-one percent of all files in the cloud contain sensitive data, demonstrating a steady increase year-over-year (YoY)
  2. The sharing of sensitive data with an open, publicly accessible link, has increased 23 percent YoY
  3. Organizations have more than 2,200 individual misconfiguration incidents per month in their public cloud instances (IaaS/PaaS)
  4. Threat events in the cloud, e.g., compromised account, privileged user and insider threats, have increased 27.7 percent YoY, with threats in Office365 growing by 63 percent YoY.

 

Cloud Data Protection, 15 Best Practices You Need to Follow

Deepa Sharma

Deepa Sharma

Deepa Sharma is CXOVoice’s Managing Editor, overseeing all coverage technology, cybersecurity, banking, and financial coverage. She can be reached at [email protected]

Related Posts

Secure Service Edge
Cyber Security

HCLTech and Cisco Unveil Managed Secure Service Edge Solution to Enhance Cybersecurity for Businesses

June 11, 2025
Ericsson and Supermicro
Business

Ericsson and Supermicro Team Up to Enhance Edge AI Technology with 5G Connectivity

June 10, 2025
Product-Aligned Operating Models
AI

How Product-Aligned Operating Models Are Essential for Thriving in an AI-Driven Future: Report

June 10, 2025
Ericsson Airtel
Business

Ericsson Expands multi-year Managed Services deal with Bharti Airtel

June 10, 2025
Capgemini Dai-ichi Life Holdings
Business

Capgemini Partners with Dai-ichi Life Holdings to Launch Global Capability Center in India

June 10, 2025
HCLTech Kerala
Press Release

HCLTech launches its second delivery center in Kerala, India

June 10, 2025
Wipro Riyadh
Business

Wipro Expands Presence in Saudi Arabia with New Regional Headquarters in Riyadh

June 10, 2025
Qualcomm Alphawave
Business

Qualcomm to Acquire Alphawave IP Group for $2.4 Billion

June 9, 2025
Load More
ADVERTISEMENT

Latest Updates

Secure Service Edge

HCLTech and Cisco Unveil Managed Secure Service Edge Solution to Enhance Cybersecurity for Businesses

by News Desk
3 days ago

Ericsson and Supermicro

Ericsson and Supermicro Team Up to Enhance Edge AI Technology with 5G Connectivity

by News Desk
4 days ago

Product-Aligned Operating Models

How Product-Aligned Operating Models Are Essential for Thriving in an AI-Driven Future: Report

by Deepa Sharma
4 days ago

Ericsson Airtel

Ericsson Expands multi-year Managed Services deal with Bharti Airtel

by Deepa Sharma
4 days ago

Capgemini Dai-ichi Life Holdings

Capgemini Partners with Dai-ichi Life Holdings to Launch Global Capability Center in India

by Deepa Sharma
4 days ago

HCLTech Kerala

HCLTech launches its second delivery center in Kerala, India

by News Desk
4 days ago

Expert Views

Opinion

When AI Empowers Both Networks and Hackers: The New Battlefield for India’s Telecoms

May 20, 2025
Molly Sands AI
AI

AI RIP: 5 Things Knowledge Workers Will Say ‘Sayonara’ to in the Next Decade

March 8, 2025
multi cloud
Cloud

Multi-Cloud Made Simple: Strategies for Smart Business Management

March 5, 2025
Soft Skills
Opinion

Soft Skills and Technical Know-How: A Winning Combination in the Tech Industry

March 4, 2025
Digital Freedom
Cyber Security

Your Data, Their Gold: The Silent Battle for Digital Freedom

February 25, 2025

Get Latest Update

Subscribe to our mailing list to receives newsletter direct to your inbox!

ADVERTISEMENT

Leaders Interviews

Steve Wilson, GenAI Cybersecurity LLMs
Cyber Security

How effective is GenAI in cybersecurity? The role of LLMs and AI in security solutions. [Interview with Steve Wilson]

-
Interview on Counterfeit products with Nikhil Narayan
Leaders Talk

Advancements in ML & AI made it possible to detect counterfeit products in real-time, says Nikhil Narayan

-
Newgenone bridges the gap between business users and IT teams with its low code capability: Varun Goswami
Leaders Talk

Newgenone bridges the gap between business users and IT teams with its low code capability: Varun Goswami

-
AI chatbots, Prasanna-Kumar
Leaders Talk

Can AI chatbots enhance customer experience and reduce the cost of serving customers?

-

Entrepreneur

Samsung Electronics appoints its first female president

Inspiring Women Entrepreneurs in India (2022)

Technology Adoption For Entrepreneurs

Volunteering management is the need of the Hour

CXOVoice.com is a leading online publication for CXOs, entrepreneurs, senior leaders, developers, and industry professionals. Our coverage spans key sectors, including IT, technology, banking, finance, cybersecurity, engineering, and automobiles.

Connect with us

Easy Links

  • Cryptocurrency
  • Event
  • Blockchain
  • Press Release
  • Resources & Downloads

Write Us

[email protected]
  • Home
  • About Us
  • Contact Us
  • Advertise
  • Privacy & Policy
  • Feedback

Copyright © 2025 CXOVoice - All Right Reserved

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

Our Spring Sale Has Started

You can see how this popup was set up in our step-by-step guide: https://wppopupmaker.com/guides/auto-opening-announcement-popups/

No Result
View All Result
  • Home
  • Technology
    • AI
    • Cloud
    • Telecom
    • Data Center
    • BPM
    • Blockchain
  • Finance
    • Banking
  • Cyber Security
  • View Points
  • Leaders Talk
  • News
  • Press Release
    • Submit Press Release

Copyright © 2025 CXOVoice - All Right Reserved