Treacherous 12 Threats to Cloud Computing

According to the Treacherous 12 Threats to Cloud Computing report compiled by the Cloud Security Alliance (CSA) Top Threats Working Group, following are the 12 critical issues to cloud security:
1. Data Breaches
2. Weak Identity, Credential and Access Management
3. Insecure APIs
4. System and Application Vulnerabilities
5. Account Hijacking
6. Malicious Insiders
7. Advanced Persistent Threats (APTs)
8. Data Loss
9. Insufficient Due Diligence
10. Abuse and Nefarious Use of Cloud Services
11. Denial of Service
12. Shared Technology Vulnerabilities

The 60-paged report also includes 21 anecdotes and examples

Comments

Post a Comment

Popular posts from this blog

30+ GitHub Products & Key Ecosystem Features You Should Know in 2026

Image
GitHub has grown far beyond a place to host code — today it's an entire ecosystem covering CI/CD, AI-assisted development, security, package management, and team collaboration. Whether you're new to the platform or just want a single reference point, here's an alphabetical list of GitHub's major products and features, each linked to its official page - GitHub Actions GitHub Advanced Security GitHub Apps GitHub CLI GitHub Code Review GitHub Code Security GitHub Codespaces GitHub Container Registry GitHub Copilot GitHub Copilot Business GitHub Copilot CLI GitHub Copilot Enterprise GitHub Copilot Extensions GitHub Dependabot GitHub Desktop GitHub Discussions GitHub Education GitHub Enterprise Cloud GitHub Enterprise Server GitHub Gist GitHub Importer GitHub Innovation Graph GitHub Issues GitHub Marketplace GitHub Mobile GitHub Models  (retiring July 30, 2026) GitHub Packages GitHub Pages ...
Read more

Building a Hyderabad Weather Dashboard with the WeatherUnion API

Image
Claude recently helped a techie find his misplaced iPhone although the Find My iPhone feature was disabled by his organization's Mobile Device Management (MDM) policy.  Claude generated a Bluetooth RSSI meter in about one minute & by tracking the phone's Bluetooth signal strength he was able to locate the phone. Commenting on AI's growing role in enabling instant, bespoke software creation for immediate practical needs without traditional development, he  tweeted : " Apparently, you can just create the tool you need now. " That line stuck with me. As a weather enthusiast, I wanted a simple web app to see how the weather differs between localities in my Hyderabad neighbourhood, side by side, before deciding whether to step out. So I built it with the help of Claude & the WeatherUnion API . The visual template came from an unlikely place — ICFOSS's IoT-based Micro Climate Monitoring System for Kerala . It's a public dashboard tracking humidity, tempe...
Read more

This Week I Learned - Week 32 2026

Image
This Week I Learned -  * When unconstrained, the AI model can draw from numerous sources to assess its options on how to proceed in answering a prompt, thereby allowing widely varying outcomes. Any foundational decisions or other instructions—artifacts collectively known as “ provenance ” when properly preserved—which were formulated during the original context session and then cleared, are lost. This is the key deficiency of vibe coding which spec-driven development and context engineering seek to address. Context engineering moves a developer from a vibe coding technique to a structured approach to generating code that preserves provenance using key artifacts. This allows context to be restored by other developers, reviewed by other stakeholders, or retrieved at any point if someone wanted to audit the inputs that generated a given codebase or simply wanted to continue building upon them. Different methodologies have emerged that offer different perspectives on how to effectively...
Read more