Cloud security teams are in turmoil as attack surfaces expand at an alarming rate
This ITPro article examines how expanding cloud attack surfaces are creating operational strain for security teams. It highlights the need for stronger governance and visibility. Reach out to Swerve Limited to explore approaches to managing cloud security at scale.
What are the main challenges facing cloud security teams today?
Cloud security teams are facing several challenges, including lenient identity and access management (IAM) practices, which 53% of security executives identified as a top concern. Insufficient access controls are becoming a significant vector for credential theft and data exfiltration. Additionally, the issue of tool sprawl is prevalent, with teams managing an average of 17 different cloud tools, leading to fragmented data and context gaps.
How are attackers exploiting cloud environments?
Attackers are increasingly targeting foundational layers of cloud environments, specifically focusing on API infrastructure, identity, and lateral network movement. Notably, API attacks have risen by 41%, making them a primary entry point for sophisticated threats. The speed of these attacks has also increased, with breaches that once took an average of 44 days now occurring in as little as 25 minutes.
What is the role of SOC teams in cloud security?
SOC teams are struggling to keep up with the surge in cloud-related attacks due to disjointed workflows and isolated data sources. Nearly 30% of respondents reported taking more than a full day to resolve incidents. To improve effectiveness, 89% of organizations believe that cloud and application security must be fully integrated with the SOC, highlighting the need for a more cohesive approach to security management.

Cloud security teams are in turmoil as attack surfaces expand at an alarming rate
published by Swerve Limited
Swerve is a responsive, 100% Kiwi-owned technology business. We are headquartered in Auckland and service clients across New Zealand.
Our customers are diverse, from the engineering firms that build the infrastructure of the nation, to the Hobbiton team in Middle-earth that warm the hearts of countless international (and local) visitors.
No matter their business, each client enjoys big team capability, delivered with small team agility - and the simplicity of one responsive IT partner for everything.
We believe IT matters
Our purpose: To put people at the heart of technology, as we design, deliver, and support exceptional IT experiences that keep business humming.
Swerve was founded in 1999 and for over 25 years we've taken care of technology because we know IT matters.
IT matters because it powers the engine rooms of the Kiwi economy. Businesses like yours, that is.
IT matters because it protects IP, data, and the lifeblood of livelihoods in an age of sophisticated cyber crime. IT matters for productivity, for communication, for healthy communities, and for everything that keeps New Zealand humming in a digital world.