--- title: Cloud CISO Perspectives: New Threat Horizons report... description: Google Cloud's Office of the CISO releases its H1 2026 Cloud Threat Horizons Report, highlighting a major shift in attack patterns. For the first time since... canonical: https://daily.dev/posts/cloud-ciso-perspectives-new-threat-horizons-report-highlights-current-cloud-threats-yt71sbg62 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Cloud CISO Perspectives: New Threat Horizons report highlights current cloud threats | daily.dev og:description: Google Cloud's Office of the CISO releases its H1 2026 Cloud Threat Horizons Report, highlighting a major shift in attack patterns. For the first time since... og:url: https://daily.dev/posts/cloud-ciso-perspectives-new-threat-horizons-report-highlights-current-cloud-threats-yt71sbg62 og:image: https://api.daily.dev/og/posts/Yt71SBG62.png og:image:alt: Cloud CISO Perspectives: New Threat Horizons report highlights current cloud threats og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cloud CISO Perspectives: New Threat Horizons report highlights current cloud threats **[Google Cloud](https://daily.dev/sources/gcp)** · 8 min read · 1 upvotes · 0 comments ## Summary Google Cloud's Office of the CISO releases its H1 2026 Cloud Threat Horizons Report, highlighting a major shift in attack patterns. For the first time since 2021, third-party software vulnerabilities (44.5%) have overtaken weak credentials (27.2%) as the primary initial access vector. The exploitation window has collapsed from weeks to days, with AI-assisted threat actors deploying attacks within 48 hours of disclosure. Key findings include North Korean actor UNC4899 weaponizing Kubernetes to steal cryptocurrency, a CI/CD supply chain attack via a compromised npm package granting full AWS admin access in under 72 hours, and ransomware gangs increasingly deleting logs and backups to hinder forensic investigations. CISOs are advised to adopt automated defenses like WAFs, enforce least privilege in pipelines, and implement tamper-resistant logging. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [A Candid Perspective on the Cloud Threat Landscape: A Recap from fwd:cloudsec EU](https://daily.dev/posts/a-candid-perspective-on-the-cloud-threat-landscape-a-recap-from-fwd-cloudsec-eu-rrzv5s0zv) · Tech Lead Digest · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#kubernetes](https://daily.dev/tags/kubernetes), [#gcp](https://daily.dev/tags/gcp) [View this post on daily.dev](https://daily.dev/posts/cloud-ciso-perspectives-new-threat-horizons-report-highlights-current-cloud-threats-yt71sbg62) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Cloud CISO Perspectives: New Threat Horizons report highlights current cloud threats","url":"https://daily.dev/posts/cloud-ciso-perspectives-new-threat-horizons-report-highlights-current-cloud-threats-yt71sbg62","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cloud-ciso-perspectives-new-threat-horizons-report-highlights-current-cloud-threats-yt71sbg62"},"datePublished":"2026-03-10T16:01:33.869Z","dateModified":"2026-08-24T06:54:24.605Z","description":"Google Cloud's Office of the CISO releases its H1 2026 Cloud Threat Horizons Report, highlighting a major shift in attack patterns. For the first time since...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/633b25c40b87604c4184aa5862083d4e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/633b25c40b87604c4184aa5862083d4e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Google Cloud","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Google Cloud","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/gcp","url":"https://daily.dev/sources/gcp"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cloud-ciso-perspectives-new-threat-horizons-report-highlights-current-cloud-threats-yt71sbg62","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,kubernetes,gcp","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Google Cloud","item":"https://daily.dev/sources/gcp"},{"@type":"ListItem","position":3,"name":"Cloud CISO Perspectives: New Threat Horizons report highlights current cloud threats"}]} ```