Many data breaches are being caused by misconfigured clouds

cloud
(Image credit: Shutterstock / Blackboard)

Data breaches are getting more expensive, and they’re frequently occurring due to misconfigured public clouds, new research has claimed.

A new report from IBM claims that 19% of data breaches happen because IT teams fail to properly protect the assets found within their cloud infrastructure. Polling 524 organizations that suffered a data breach between August 2019 and April 2020, IBM also found that the average cost of a data breach increased by half a million dollars during that time.

Many organizations rely on multi-cloud infrastructure, especially with the Covid-19 pandemic forcing everyone to work remotely. Still, for more than half (52%), securing data stored in the public cloud is a challenge.

The risk is not discouraging them, however. Almost all (85%) of IT organizations are either considering, or already using the public cloud. They’re happy to accept these shortcomings, as the positives outweigh the negatives: cloud infrastructure is capable of increasing effectiveness and visibility in complex networks, as well as taking the workload from on-premise networks which are often unable to properly support mobile workforces.

Using zero trust

The report further states that the main two approaches IT organizations take, when securing their cloud infrastructure, are zero trust frameworks and IP whitelisting.

Zero trust frameworks secure user-to-application gateways, freeing the software developer from the need to enter the network to access cloud resources from their home office. That way, admins can limit what each employee can do within the system.

IP whitelisting, on the other hand, creates a list of approved IP addresses that can enter the network and access its resources. Usually, admins would assign static and dedicated IP addresses to all employee devices. Still, this approach can sometimes be too expensive, especially for smaller companies. 

IBM believes they can stay resilient by implementing easily scalable third-party solutions.

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Security padlock in circuit board, digital encryption concept
Rising cost of breaches forces organizations to rethink cybersecurity
security
The true cost of a security breach
Holographic representation of cloud computing over open businessman's hand
AWS, Azure and Google Cloud credentials from old accounts are putting businesses at risk
Image of someone clicking a cloud icon.
Many businesses are overspending on their cloud storage budget
Digital clouds against a blue background.
Companies still want to do more with cloud, but security remains a key concern
Concept art representing cybersecurity principles
Fragmented cybersecurity is costing businesses billions, and putting them at risk
Latest in Security
healthcare
Software bug meant NHS information was potentially “vulnerable to hackers”
A hacker wearing a hoodie sitting at a computer, his face hidden.
Experts warn this critical PHP vulnerability could be set to become a global problem
botnet
YouTubers targeted by blackmail campaign to promote malware on their channels
A close-up of a phone screen showing the Telegram, Signal and WhatsApp apps
Agentic AI has “profound” issues with security and privacy, Signal President says
botnet
Another top security camera maker is seeing devices hijacked into botnet
Bluetooth
Top Bluetooth chip security flaw could put a billion devices at risk worldwide
Latest in News
Apple's Craig Federighi demonstrates the iPhone Mirroring feature of macOS Sequoia at the Worldwide Developers Conference (WWDC) 2024.
Report: iOS 19 and macOS 16 could mark their biggest design overhaul in years – and we have one request
Google Gemini Calendar
Gemini is coming to Google Calendar, here’s how it will work and how to try it now
Lego Mario Kart – Mario & Standard Kart set on a shelf.
Lego just celebrated Mario Day in the best way possible, with an incredible Mario Kart set that's up for preorder now
TCL QM7K TV on orange background
TCL’s big, bright new mid-range mini-LED TVs have built-in Bang & Olufsen sound
Apple iPhone 16e
Which affordable phone wins the mid-range race: the iPhone 16e, Nothing 3a, or Samsung Galaxy A56? Our latest podcast tells all
An image of a Jackbox Games Party Pack
Jackbox games is coming to smart TVs in mid-2025, and I can’t wait to be reunited with one of my favorite party video games