谷歌云：2026年上半年云威胁展望报告（英文版）（40页）.pdf

1、Cloud Threat Horizons ReportH1 2026Mission Statement 3Executive Summary 4Threat Actors Increasingly Targeting Software Vulnerabilities 6Compromised Identities and Data Theft Dominate Industry Cloud Intrusion Trends 9Malicious Insiders Increasingly Using Platform Agnostic Environments to Exfiltrate D

2、ata 14North Korean Actors Weaponize Kubernetes Workloads for Multimillion-Dollar Cryptocurrency Theft 20From CI/CD to Cloud Compromise:Real-World Breach via OpenID Connect Abuse 24Protecting the Cloud Forensic Timeline from Sophisticated Threat Actors 29Accelerating Cloud Incident Response Through A

3、utomated Pipeline Orchestration 32Contributors 38Executive Resource Addendum 39Contents3Cloud Threat Horizons ReportMission StatementThe Google Cloud Threat Horizons Report provides decision-makers with strategic intelligence on threats to not just Google Cloud,but all cloud service providers.The re

4、port focuses on recommendations for mitigating risks and improving cloud security for leaders and practitioners.The report is informed by Google Clouds Office of the CISO,Google Threat Intelligence Group(GTIG),Mandiant Consulting,and various Google Cloud intelligence,security,and product teams.4Clou

5、d Threat Horizons ReportFrom Rapid Exploitation to Forensic ReadinessExecutive SummaryThe cloud threat landscape is rapidly shifting.Google Cloud Security observed the window between vulnerability disclosure to active exploitation collapse from weeks to days in the second half of 2025.This activity,

6、along with AI-assisted attempts to probe targets for information and continued threat actor emphasis on data-focused theft,indicates that organizations should be turning to more automatic defenses.Recognizing our commitment to shared fate in cloud security,this edition of our Cloud Threat Horizons r