30 August 2025

Securing the Cloud in an Age of Escalating Cyber Threats

Drew Firment, Matthew Lloyd Davies

As cloud environments become increasingly complex and attackers become more sophisticated, organizations must rethink their approach to securing infrastructure. Recent cyberattacks in Singapore serve as a critical wake-up call. In a recent report, Rubrick found that nearly 20% of organizations in Singapore experienced more than 25 cyberattacks in 2024, averaging at least one attack every two weeks.

With 92% of IT and security leaders in Singapore managing hybrid cloud environments, and nearly half reporting that most of their workloads are now hosted in the cloud, the traditional perimeter-based defense model is no longer sufficient. Threat actors are exploiting this complexity. To stay ahead, organizations must shift their focus: Stop securing the perimeter and start protecting data at its source, whether it lives on-premises or in the cloud. US organizations, in particular, should take note of Singapore's example and rethink their cloud security strategies before it's too late.

Prioritize Detection Across a Wide Attack Surface

With the rise of cloud adoption, hybrid work models, and software-as-a-service (SaaS) sprawl, cyberattacks continue to accelerate, leaving many security teams unsure of where to begin in terms of cyber protection. The reality is, you can't catch everything, which makes cyber defenses an essential priority with the rise of these attacks. First and foremost, start by focusing on the threats that cause the most damage. Phishing, malware, and insider threats remain the leading causes of real-world breaches.

From there, make a shift toward behavior-based detection. When you understand what "normal" looks like for your users and systems, anomalies like odd logins or unusual file movements will stand out more clearly when evaluating flagged alerts. Most importantly, you will need visibility across your ecosystem: cloud environments, on-premises, endpoints, and everything in between. It's not about getting bogged down by every alert, but about knowing where to look and recognizing what truly matters.

No comments: