Misconfiguration Worries Grow

Security concerns vs actual incidents

Misconfigurations are a major security concern when running business applications in the public cloud. Errors in how infrastructure, applications and policies are set up can have significantly different impacts, but they all get labeled under the heading of “misconfiguration.”

First the bad news. In the SANS Institute‘s latest survey of information security professionals, 54% believe that poorly configured or insecure interfaces or APIs are a major concern when it comes to business applications, which is an increase from the 46% that felt that way in the 2019 version of the study. One in every 2.5 security pros concerned about these types of misconfigurations actually saw their fears come true in the last 12 months with an insecure interface or API being exploited.


The complete article can be found here.