While malware and ransomware are normally associated with email or device vectors, out of 4,000 mid-market companies monitored we saw 3,512 such attacks on cloud services such as Dropbox, Salesforce, etc.
Phishing is normally associated with email as a distribution vector. However, we saw a massive increase in cloud usage as a phishing vector - specifically in collaboration platforms such as Google Docs, Slack, etc.
Brute force or bot attacks on cloud apps are on a very intensive rise. In 2021 we saw over 12,000 such attacks on 4,000 monitored companies, compared to 900 such attacks in 2019
Cloud apps are most prone to insider threats - with many of these threats having no malicious intent. The most common is unauthorized data sharing which may result in PII, PCI, or PHI violations