Google: Cloud attacks exploit flaws more than weak credentials Hackers are rapidly weaponizing newly disclosed third‑party software flaws to gain initial access to cloud environments, shrinking the exploitation window from weeks to just days. State-sponsored and financially motivated actors are increasingly using bug exploits, supply‑chain compromises, and compromised identities to silently exfiltrate data and maintain long-term access #React2Shell #UNC4899

Cloud attacks now exploit software vulnerabilities more than weak credentials, with 44.5% using bug exploits like React2Shell and XWiki flaws for initial access, overshadowing credential breaches at 27%. #CloudThreats #BugExploits #USA