Despite all of the hand wringing over cloud security, major cloud security breaches haven't been grabbing headlines. The past year has seen major breaches, such as the ones that hit
Sony and
Epsilon, but we haven't heard much of an emphasis about the cloud being a weakness.
Part of this, of course, could be a simple matter of semantics. Some have emphasized Epsilon's role as a provider of email marketing services -- in other words, it's a SaaS company -- but the breach was a traditional spear-phishing attack used to gain access to email servers, not, say, an assault on hypervisor vulnerabilities.
Cloud providers, such as Dropbox and
Google, have had their issues, but the major cloud-related problems have involved outages, not data being breached.
