Data breaches in cloud servicesCommon consequences of data breachesExample of a real event – DrizlyBest practices for detecting and mitigating data breaches in cloud environmentsMisconfigurations in cloud servicesCommon consequences of misconfigurationExample of a real event – CommuteAirBest practices for detecting and mitigating misconfigurations in cloud environmentsInsufficient IAM, secrets, and key managementCommon consequences of insufficient IAM and key managementExample of a real event – Football AustraliaBest practices for detecting and mitigating insufficient IAM, secrets, and key management in cloud environmentsAccount hijacking in cloud servicesCommon consequences of account hijackingExample of a real event – Retool MFABest practices for detecting and mitigating account hijacking in cloud environmentsInsider threats in cloud servicesCommon consequences of insider threatsExample of a real event – First Republic BankBest practices for detecting and mitigating insider attacks in cloud environmentsInsecure APIs in cloud servicesCommon consequences of insecure APIsExample of a real event – TrelloBest practices for detecting and mitigating insecure APIs in cloud environmentsThe abuse of cloud servicesCommon consequences of abuse of cloud servicesExample of a real event – UNC2903Best practices for detecting and mitigating abuse of cloud servicesThe MITRE ATT&CK frameworkSummary