60% in SA victim to public cloud cybersecurity incidents

Issue 5 2020 Information Security

According to The State of Cloud Security 2020[1], a global survey from Sophos, six in ten (60%) organisations from South Africa experienced a public cloud security incident in the last year – including ransomware (25%), other malware (28%), exposed data (28%), compromised accounts (27%), and cryptojacking (26%). Globally, organisations running multi-cloud environments are greater than 50% more likely to suffer a cloud security incident than those running a single cloud.

Europeans suffered the lowest percentage of security incidents in the cloud, an indicator that compliance with General Data Protection Regulation (GDPR) guidelines are helping to protect organisations from being compromised. India, on the other hand, fared the worst, with 93% of organisations being hit by an attack in the last year.

“Ransomware, not surprisingly, is one of the most widely reported cybercrimes in the public cloud. The most successful ransomware attacks include data in the public cloud, according to the State of Ransomware 2020 report, and attackers are shifting their methods to target cloud environments that cripple necessary infrastructure and increase the likelihood of payment,” said Chester Wisniewski, principal research scientist, Sophos. “The recent increase in remote working provides extra motivation to disable cloud infrastructure that is being relied on more than ever, so it’s worrisome that many organisations still don’t understand their responsibility in securing cloud data and workloads. Cloud security is a shared responsibility, and organisations need to carefully manage and monitor cloud environments in order to stay one step ahead of determined attackers.”

The unintentional open door: how attackers break in

Accidental exposure continues to plague organisations, with misconfigurations exploited in 39% of reported attacks in South Africa. Detailed in the SophosLabs 2020 Threat Report[2], misconfigurations drive the majority of incidents and are all too common given cloud management complexities.

Additionally, 59% of South African organisations report that cybercriminals gained access through stolen cloud provider account credentials. Despite this, only more than a quarter (28%) of organisations say managing access to cloud accounts is a top area of concern. Data from Sophos Cloud Optix, a cloud security posture management tool, further reveals that globally 91% of accounts have over-privileged identity and access management roles, and 98% have multi-factor authentication disabled on their cloud provider accounts.

The silver lining

Nearly all respondents (89%) from South Africa admit to concern about their current level of cloud security, an encouraging sign that it’s top of mind and important. Appropriately, “Identifying sudden increase in cloud spends” tops the list of security concerns for more than three in ten (31%) of the organisations followed by “ identifying and responding to security incidents” and “convincing senior management to invest in cloud security” (30% and 30% respectively).

[1] The full report, along with a detailed list of cloud security recommendations, is available at https://secure2.sophos.com/en-us/content/state-of-cloud-security.aspx.

[2] https://www.sophos.com/en-us/medialibrary/pdfs/technical-papers/sophoslabs-uncut-2020-threat-report.pdf




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Back-up securely and restore in seconds
Betatrac Telematic Solutions Editor's Choice Information Security Infrastructure
Betatrac has a solution that enables companies to back-up up to 4 GB of data onto a device and restore it in 30 seconds in an emergency, called Rapid Access Data Recovery (RADR).

Read more...
The rise of AI-powered cybercrime and defence
Information Security News & Events AI & Data Analytics
Check Point Software Technologies launched its inaugural AI Security Report, offering an in-depth exploration of how cybercriminals are weaponising artificial intelligence (AI), alongside strategic insights defenders need to stay ahead.

Read more...
The deepfake crisis is here and now
Information Security Training & Education
Deepfakes are a growing cybersecurity threat that blur the line between reality and fiction. These AI-generated synthetic media have evolved from technological curiosities to sophisticated weapons of digital deception, costing companies upwards of $600 000 each.

Read more...
What does Agentic AI mean for cybersecurity?
Information Security AI & Data Analytics
AI agents will change how we work by scheduling meetings on our behalf and even managing supply chain items. However, without adequate protection, they become soft targets for criminals.

Read more...
Phishing attacks through SVG image files
Kaspersky News & Events Information Security
Kaspersky has detected a new trend: attackers are distributing phishing emails to individual and corporate users with attachments in SVG (Scalable Vector Graphics) files, a format commonly used for storing images.

Read more...
Crypto in SA: between progress and precaution
Information Security
“As cryptocurrency gains momentum and legitimacy, it’s becoming increasingly important for people to pay attention to financial security”, says Richard Frost, head of technology and innovation at Armata Cyber Security.

Read more...
Cyber recovery requires a different approach to disaster recovery
Information Security
Disaster recovery is about getting operations back on track after unexpected disruptions; cyber recovery, however, is about calculated actions by bad actors aiming to disrupt your business, steal sensitive data, or hold your system hostage.

Read more...
MDR users claim 97,5% less
Sophos Information Security
The average cyber insurance claim following a significant cyberattack is just $75 000 for MDR users, compared with $3 million for endpoint-only users, according to a new independent study.

Read more...
The impact of GenAI on cybersecurity
Sophos News & Events Information Security
Sophos survey finds that 89% of IT leaders worry GenAI flaws could negatively impact their organisation’s cybersecurity strategies, with 87% of respondents stating they were concerned about a resulting lack of cybersecurity accountability.

Read more...