CISA, NSA share best practices for securing cloud services

NSA and CISA released five concise guidance documents on cloud security best practices, detailing secure approaches for cloud identity and access management, key management systems, network segmentation and encryption, protecting data at rest and in transit, and mitigating risks from managed service providers. The report underscores active threats to cloud services and references notable cases and tools (e.g., Nobelium activity and CISA’s Untitled Goose Tool) to contextualize the importance of these measures, but it contains no specific incident analysis or IOCs.