Red Hat reports widespread cloud security incidents

A Red Hat survey revealed that 97% of organizations experienced at least one incident that occurs within cloud-native environments in the past year, with misconfigured infrastructure or services, unauthorized access, and known vulnerabilities as the most common incidents that are often related to routine operational mistakes, IT Brief Australia states.

When asked about the factors that affect business operations beyond IT teams, 74% of companies that decided to slow or delay application deployments over the past year cited security concerns, while 92% said loss of customer trust, remediation work, and lower developer productivity have broader impacts. Fifty-six percent of respondents reported having a highly proactive day-to-day security posture, while just 39% cited having a mature, well-defined cloud-native security method, and nearly 22% had no defined strategy in place.

The survey also showed that over 60% of organizations plan to invest in automating DevSecOps over the next one to two years, followed by software supply chain security and expansion of runtime protection to block and detect threats cited by 56% and 54% of respondents, respectively. Meanwhile, research found that while 58% of those surveyed see AI as an important tool in their security approach, governance structures have lagged behind implementation efforts.

Ninety-six percent also raised significant concerns about the use of generative AI in cloud infrastructures, with unauthorized use of shadow AI tools, exposure of sensitive data, and the integration of insecure third-party AI services within established systems as the key issues. The survey also revealed that while nearly 70% of companies adopt identity and access management strategies, just under 50% had adopted container image signing.