Cloud Is an Easy Conduit for Attackers – Source: www.govinfosecurity.com

Cloud Security
,
Security Operations
,
Video

Cado Security’s James Campbell on How Attackers Find Gaps in Cloud Environments

Anna Delaney (annamadeline) •
July 25, 2023    

The rapid adoption of cloud is a double-edged sword. While it offers organizations great opportunities for embracing innovation, it also outpaces security measures, leaving gaps for attackers to exploit. James Campbell, CEO of Cado Security, shared how attackers are capitalizing on these gaps, using the cloud to steal sensitive data, execute denial-of-service attacks and even facilitate state-sponsored intrusion.

Organizations new to the cloud often struggle to keep pace with change, leading to misunderstandings in the shared responsibility model and leaving them vulnerable. Campbell emphasized the need for a paradigm shift in security as legacy on-premises strategies may not be effective in the cloud environment. “Organizations must invest in developing the right skill sets to navigate cloud security effectively,” he said.

With cloud incidents on the rise, Campbell underscored the importance of investigating and responding to cloud-based threats promptly. Organizations must swiftly analyze and mitigate security incidents to protect data and comply with regulations, he said.

In this video interview with Information Security Media Group at Infosecurity Europe 2023, Campbell also discussed:

• Issues that arise when vulnerable industries adopt cloud;
• Considerations for cloud adoption;
• Automated solutions to help customers effectively investigate and respond to cloud-based security incidents.

Campbell has over 15 years of experience in helping global organizations tackle sophisticated cyberespionage and criminal campaigns. Prior to founding Cado Security, he served as a director at PwC, where he built the cyber incident response service. Earlier in his career, Campbell was the assistant director of operations at the Australian Signals Directorate, where he led intelligence for Australia’s national incident response capability.