Cloud Threat Landscape
Targeted Technologies
Targeted Technologies

Targeted Technologies

Technologies targeted by threat actors or at risk of exploitation (prevalence indicates percentage of cloud environments with at least one hosted instance of the technology)

All Technologies

5 views

All Technologies

Most Targeted

Most Prevalent

With Techniques

CISA KEV

NameNo. IncidentsTechniquesPrevalence (%)NucleiMetasploitCISA KEV
1

0.82

1
1

0.38

1
0
SNS abuse for spam or phishing
1

0.61

6

0.35

0

0.34

0

0.33

0

0.13

1

0.18

0

0.11

2

0.06

1

0.01

1

0.08

7
Misconfigured Apache Hadoop abuse

0.53

3

0.77

0

0.32

1

0.01

0

0.49

1

0.01

0

0.79

0

0.1

0

0.14

0

0.64

0

0.7

0

0.36

0
Misconfigured Argo abuse

0.32

1

0.01

0

0.43

1
0
Appstream abuse
1
Resource injection in CloudFormation template
1
1
2
1
Backdoor Lambda LayerServerless executionLambda persistence
0
Azure Arc abuse
1
Azure Batch abuse
3
1

0.01

1

0.07

cAdvisor abuse

0.01

0

0.23

0

0.55

0

0.39

0

0.23

0

0.45

0

0.18

0

0.13

0

0.17

13

0.1

1

0.01

0

0.91

0

0.65

16
Abusing exposed Docker socketBackdoor Docker imageMisconfigured Docker abuse

0.89

1

0.07

3

0.61

0

0.20

1

0.11

0
1

0.45

1

0.27

0

0.11

0

0.23

0

0.82

0

0.34

0

0.42

0

0.2

0

0.26

0

0.24

0

0.77

6
pwn requestRepository webhook abuseRegister self-hosted runner

0.05

3

0.10

0

0.31

0

0.70

0

0.11

0

0.43

1
Misconfigured Consul abuse

0.19

0

0.33

0

0.23

0

0.42

0

0.82

0

0.25

0

0.17

0

0.25

3

0.01

6
Repository webhook abuse

0.46

3

0.12

4
Jupyter Notebook misconfig abuseJupyter Notebook ransomware

0.63

1

0.54

0

0.21

1

0.22

0
Misconfigured KubeFlow abuse

0.04

9
Propagation via KubeletK8s anonymous auth abuse

0.77

0

0.30

3

0.23

0

0.17

1
0

0.33

1

0.05

0

0.50

0

0.41

0

0.17

0

0.27

1

0.11

0

0.16

2
Email server hijacking

0.1

0

0.42

Misconfigured Power Pages abuse
0

0.28

4
SQL injectionSQL commands

0.46

1

0.02

0

0.11

1
2

0.58

0

0.24

1
SQL injectionSQL commands

0.65

2

0.86

0

0.12

1
Package dependency confusion

0.59

1
0

0.37

1

0.02

0

0.28

0

0.19

0

0.21

0

0.11

0

0.14

0

0.26

1

0.03

3

0.68

1

0.29

0

0.34

2
Misconfigured DB abuse

0.87

0

0.26

0

0.16

0

0.20

1

0.05

0

0.34

13
Redis-as-a-backdoorMisconfigured Redis abuse

0.80

0

0.33

0

0.12

0

0.15

0

0.25

5
Storage Denial of Wallet amplification attack
1
1

0.17

0

0.40

0

0.19

Misconfigured Selenium Grid abuse

0.33

1

0.05

1
1

0.33

0

0.25

0

0

0

0.30

0
Spring Boot Actuator abuse

0.72

0

0.18

1

0.84

0

0.28

0

0.29

1

0.01

0

0.21

0

0.39

0

0.30

2
Repository webhook abuse

0.09

0

0.2

0

0.22

0

0.11

1
0

0.26

0

0.20

1
0

0.20

0

0.15

1

0.02

0

0.31

3

0.1

3
Misconfigured Wordpress abuse

0.31

2

0.02

0

0.21

0

0.23

1

0.12