Why Cloud Security Remains Difficult in Multi-Cloud Environments by Aakash Gupta

This Vectra AI whitepaper outlines how sophisticated attackers — including APT29/NOBELIUM, Storm-0558, and UNC3944 (Scattered Spider) — exploit identity weaknesses, OAuth/application permissions, forged tokens, and fragmented cloud telemetry to move laterally and exfiltrate data across multi-cloud and hybrid environments, and it advocates for unified control-plane and cloud-network-plane observability and AI-driven detection to correlate signals and detect attacks earlier.