Cybersecurity in the age of AI and multicloud environments

By Ido Vapner

Cybersecurity attacks are becoming more sophisticated and frequent.

Hackers increasingly leverage technologies like generative AI and machine learning to execute more targeted and complex attacks. They utilize generative AI to create highly convincing phishing schemes, create polymorphic malware that is difficult to detect, automate the discovery of vulnerabilities and even produce deepfakes to execute social engineering scams.

With such advancements in hacking techniques, the cybersecurity challenge has grown exponentially for organizations.

Still, I speak with many security leaders who believe that implementing cloud-native security services and third-party security tools is sufficient to protect their organizations. I suggest these measures are only the first step in a larger process of preventing, detecting and mitigating cyberattacks.

True protection requires a deeper understanding of the cloud environments, including its vulnerabilities, security gaps and attack surfaces. Cloud infrastructures, in particular, present new attack surfaces that hackers are quick to exploit. Enhanced security measures are more critical than ever.

Multicloud environments

Today, most enterprises rely on two or more cloud service providers. This multicloud strategy provides flexibility, allowing companies to move workloads between providers based on cost, performance or specific needs. However, managing security in a multicloud environment is inherently more challenging due to the complexity of securing different platforms with varied configurations, tools and architectures.

Each cloud provider offers robust security features tailored to protect their specific environment. While these native services are effective, they often fall short when managing security across multiple cloud environments.

In multicloud scenarios, specialized solutions designed for cross-cloud protection become essential. These solutions can help address security risks, ensure compliance and reduce blind spots, which are difficult to manage when working with disparate systems. The complexity of multicloud environments demands a more holistic approach to safeguard against potential breaches.

To secure a multicloud environment effectively, organizations need a clear understanding of their cloud attack surface and a consistent method for assessing and managing risks. Frequent security and compliance assessments are essential to ensure that applications, infrastructure and data remain secure.

Cloud-native application protection platforms

A cloud-native application protection platform (CNAPP) is a comprehensive solution designed to address the full spectrum of security challenges in multicloud environments.

CNAPPs provide end-to-end protection by offering visibility into all aspects of cloud security, including:

1. API security: Protects APIs, which are essential for enabling communication between cloud-native applications and services, from potential breaches and unauthorized access
2. Kubernetes security: Secures Kubernetes clusters, a cornerstone of modern cloud-native environments, ensuring that containers and workloads are protected from vulnerabilities
3. Container security: Monitors containerized applications for vulnerabilities, misconfigurations and compliance issues, providing real-time protection across all containers
4. Application security: Protects cloud-native applications from a range of threats, including vulnerabilities, misconfigurations and attacks on application code
5. Cloud infrastructure security: Monitors cloud infrastructure for misconfigurations, ensuring that the foundational layers of the cloud environment are secure
6. Compliance and governance: Automates the process of monitoring and managing compliance with regulatory standards such as GDPR, HIPAA and PCI DSS, ensuring the organization remains compliant

By integrating these capabilities, a CNAPP provides a holistic security solution that helps organizations secure their multicloud environments, mitigate risks and respond quickly to threats.

Penetration testing and security assessments

Beyond CNAPPs, penetration testing and security assessments play a vital role in securing multicloud environments. Penetration testing, often referred to as ethical hacking, involves simulating cyberattacks on a system or application to identify vulnerabilities that malicious actors could exploit.

Regular penetration testing helps security teams uncover weaknesses in applications, infrastructure and cloud configurations. For example, a penetration test might reveal that a developer has stored sensitive credentials in an insecure location, such as a public repository or an exposed Kubernetes pod. This type of proactive testing enables engineering teams to fix issues before they become serious vulnerabilities.

By conducting frequent security assessments, businesses can ensure that their cloud environments are secure, reliable and compliant with industry regulations. Penetration testing reports provide valuable insights into potential threats and their severity, as well as recommendations for mitigating those risks. Armed with this information, organizations can make informed decisions about how to strengthen their security posture.

Improving software reliability

In addition to identifying vulnerabilities, penetration testing also helps improve the reliability of cloud-native applications. Engineering teams can use the results of these tests to develop more secure and resilient applications.

For example, penetration tests can uncover misconfigurations or flaws in cloud infrastructure that may affect the performance or security of applications. With this information, developers can implement fixes, patches and other improvements to harden their applications against future threats.

As companies modernize their applications and migrate to cloud providers like AWS, GCP and Azure, integrating robust security solutions, including penetration testing, becomes crucial. These efforts ensure that applications and services are not only secure but also scalable and efficient, reducing downtime and operational risks.

Long-term success

Investing in cloud security is no longer optional—it's a strategic imperative for ensuring long-term success in an increasingly digital and cloud-driven world.

For organizations looking to increase their security posture and build reliable, robust cloud-native applications, a combination of a CNAPP and penetration testing is essential.

By leveraging the right tools, businesses can navigate the complexities of multicloud environments, stay ahead of evolving cyber threats and build a more secure future.

Ido Vapner is Chief Technology Officer for CEE & EM at Kyndryl