Cloud security research and guide roundup: Infrastructure and access

The 2025 Cloud Security Roundup highlights a surge in cloud attacks exploiting mismanaged identities as the primary entry point, alongside increasing risks from compromised supply chains and the novel misuse of AI for malicious purposes. Attackers are becoming more sophisticated, leveraging AI to automate attacks and bypass traditional security measures, requiring a shift towards zero-trust architectures and robust identity governance. Ultimately, the report emphasizes the need for proactive security measures focused on these key areas to protect cloud environments in the coming year.