Fun

Thales 2025 Global Cloud Security Study Reveals Organizations Struggle to Secure Expanding, AI-Driven Cloud Environments

2025-07-10 17:25 PM

(K-daily 뉴스)

Thales, a global leader in technology and cybersecurity, today released the findings of its 2025 Cloud Security Study conducted by S&P Global Market Intelligence 451 Research, revealing that AI-specific security has rapidly emerged as a top enterprise priority, ranking second only to cloud security. Over half (52%) of respondents said they are prioritizing AI security investments over other security needs, signaling a shift in how organizations are allocating budgets in response to the accelerated adoption of AI. This year’s research captures perspectives on cloud security challenges from nearly 3,200 respondents in 20 countries across a variety of seniority levels.

Cloud remains at the forefront of security considerations

Cloud is now an essential part of modern enterprise infrastructure, but many organizations are still building the skills and strategies needed to secure it effectively. The variability of controls across cloud providers, combined with the distinct mindset required for cloud security, continues to challenge security teams. This pressure is only increasing as AI initiatives drive more sensitive data into cloud environments, amplifying the need for robust, adaptable protections.

This year’s Thales Cloud Security Study confirms that cloud security remains a top concern for enterprises worldwide. Nearly two-thirds (64%) of respondents ranked it among their top five security priorities, with 17% identifying it as their number one. Security for AI, a new addition to the list of spending priorities this year, ranked second overall, highlighting its growing importance. Despite sustained investment, cloud security remains a complex, persistent challenge that goes beyond technology to include staffing, operations, and the evolving threat landscape.

“The accelerating shift to cloud and AI is forcing enterprises to rethink how they manage risk at scale,” Sebastien Cano, Senior Vice President, Cyber Security Products at Thales, said. “With over half of cloud data now classified as sensitive, and yet only a small fraction fully encrypted, it’s clear that security strategies haven’t kept pace with adoption. To remain resilient and competitive, organizations must embed strong data protection into the core of their digital infrastructure.”

The average number of public cloud providers per organization has risen to 2.1, with most also maintaining on-prem infrastructure. This growing complexity is driving security challenges with 55% of respondents reporting that cloud is harder to secure than on-prem, a 4-percentage-point increase from last year. As organizations expand through growth or M&A, they’re also seeing a surge in SaaS usage, now averaging 85 applications per enterprise, complicating access control and data visibility.

This complexity extends to security operations, with many teams struggling to align policies across varied platforms. The study found that 61% of organizations use five or more tools for data discovery, monitoring, or classification, and 57% use five or more encryption key managers.

Attacks target cloud resources with human error remaining a top vulnerability

Cloud infrastructure is a prime target for attackers as organizations continue to struggle with securing increasingly complex environments. According to the 2025 Thales Cloud Security Study, four of the top five most targeted assets in reported attacks are cloud-based. The rise in access-based attacks, as reported by 68% of respondents, underscores growing concerns around stolen credentials and insufficient access controls. Meanwhile, 85% of organizations say at least 40% of their cloud data is sensitive, yet only 66% have implemented multifactor authentication (MFA), leaving critical data exposed. Compounding the issue, human error remains a major contributing factor in cloud security incidents, from misconfigurations to poor credential management.

“A rising number of respondents report challenges in securing their cloud assets, an issue that is further amplified by the demands of AI projects that often operate in the cloud and require access to large volumes of sensitive data,” Eric Hanselman, Chief Analyst at S&P Global Market Intelligence 451 Research, said. “Compounding this issue, four of the top five targeted assets in reported attacks are cloud-based. In this environment, strengthening cloud security and streamlining operations are essential steps toward enhancing overall security effectiveness and resilience.”

For more information, please download the full report and join our webinar hosted by Eric Hanselman, Chief Analyst at S&P Global Market Intelligence 451 Research.

About Thales

Thales (Euronext Paris: HO) is a global leader in advanced technologies for the Defence, Aerospace, and Cyber & Digital sectors. Its portfolio of innovative products and services addresses several major challenges: sovereignty, security, sustainability and inclusion.

The Group invests more than €4 billion per year in Research & Development in key areas, particularly for critical environments, such as Artificial Intelligence, cybersecurity, quantum and cloud technologies.

Thales has more than 83,000 employees in 68 countries. In 2024, the Group generated sales of €20.6 billion.

PLEASE VISIT

Thales Group

Cloud Protection & Licensing Solutions | Thales Group

Cybersecurity Solutions | Thales Group

View source version on businesswire.com: https://www.businesswire.com/news/home/20250630070161/en/

Website: https://www.thalesgroup.com/en

IT 주요뉴스

Cirium Announces New Global Head of Cirium Ascend Consultancy
Cirium, the world’s most trusted source of aviation analytics, is pleased to announce the appointment of Stephen Burnside as Global Head of Consulta...
LambdaTest Enables Playwright Testing on iOS Real Devices to Enhance Mobile Test Accuracy
LambdaTest, a GenAI-powered quality engineering platform, has announced support for Playwright testing on real iOS devices, enabling mobile web teams ...
람다테스트, iOS 실제 기기상의 플레이라이트 테스트 지원으로 모바일 테스트 정확도 향상
생성형 AI 기반 품질 엔지니어링 플랫폼인 람다테스트(LambdaTest)는 실제 iOS 기기에서 플레이라이트(Playwright) 테스...
과학 주요뉴스

이공계 석사과정 월 80만원·박사과정 110만원…”예타면제 확정”
연구 개발. 경기 성남시의 제약 벤처기업에서 연구원이 제품 개발과 관련된 작업을 하고 있다. ⓒ촬영 이세원 정...
국민이 꼽은 국가난제는 ‘인구구조·온라인 피싱·생계안정’
국민 선정 10대 국가난제 ⓒSTEPI 제공 국민들은 인구구조 변화 대응, 온라인 피싱 등 신종범죄, 주거와 물가 등 국...
AI 학습에 쓰이는 ‘공개 데이터’ 처리방안은…정부 기준 나왔다
오픈 인공지능(AI) ⓒ연합뉴스 자료사진 기업들이 챗GPT 등 생성형 인공지능(AI) 모델을 개발하는 과정에서 ‘공...