McAfee says cloud security not as bad as we feared… it's much worse
The average business has around 14 improperly configured IaaS instances running at any given time and roughly one in every 20 AWS S3 buckets are left wide open to the public internet.
These are among the grim figures rolled out Monday by researchers with McAfee, who say that security practice has not kept up with the rapid adoption of cloud services.
The security giant conducted a study using around 30 million events logged by its own business services and found that companies are not keeping proper track of the cloud services they use and, as a consequence, are not properly securing them. According to McAfee, the average business uses around 1,900 cloud instances, but most of the companies they surveyed only thought they used around 30. It is no surprise, then, that many IaaS and PaaS accounts are not properly configured to limit what data can be accessed.
