6 insights from Microsoft’s 2024 state of multicloud risk report to evolve your security strategy

Microsoft’s 2024 State of Multicloud Security Risk report synthesizes telemetry from Defender for Cloud, Security Exposure Management, Entra Permissions Management, and Purview to identify top multicloud risks across Azure, AWS, and GCP, including excessive and inactive workload identities (with “super identities”), widespread unused permissions (only 2% used), cross-domain attack paths, and vulnerable code repositories. It recommends a proactive, unified approach via CNAPP to correlate alerts across the application lifecycle, CIEM to enforce least-privilege and remove standing access, integrated XDR for cross-cloud investigations, and multilayered data security to reduce tool sprawl and blind spots.