That’s a significant and concerning trend in cloud security. The rapid increase in alerts, especially high-severity ones targeting IAM tokens and service functions, highlights how attackers are focusing on identity-based attacks. The 213% rise in remotely accessed service account tokens suggests that adversaries are actively exploiting automation and misconfigurations.
The exposure of environment variable files is particularly alarming 90,000 unique IAM credentials across 7,000 cloud environments is a massive risk. Attackers targeting these credentials can gain direct access to backend systems, increasing the potential for data breaches and lateral movement within cloud infrastructures.