Cloud Attacks Retrospective: Evolving Tactics, Familiar Entry Points

Wiz's Cloud Attack Retrospective highlights eight common cloud threats for 2025, showing rapid exploitation of disclosed PAN-OS CVEs (leading to web shells and Sliver implants), credential- and misconfiguration-driven cryptomining (CPU_HU), persistent deployment techniques (cron jobs, unauthenticated Selenium Grid), and ongoing phishing-facilitated identity breaches; the report maps MITRE ATT&CK techniques to real incidents, CVEs, and known actor campaigns and offers detection and mitigation guidance.