Get Permission
The U.S. Cybersecurity and Infrastructure Security Agency warns that hackers are increasingly targeting a variety of cloud services by waging phishing schemes and brute-force attacks.
CISA reports in an alert issued Wednesday that attacks targeting cloud services have steadily increased since many organizations switched to a largely remote workforce as a result of the COVID-19 pandemic, with employees using a mix of corporate-owned and personal devices to access these services. Attackers are taking advantage of lax security practices, such as weak passwords and workers accessing data from unsecured laptops. Despite the use of security tools, affected organizations typically had weak cyber hygiene practices in place that allowed threat actors to conduct successful attacks, the CISA alert notes.