Too Much Trust: The Danger of Over-Privileged Cloud Identities

44% of true-positive security alerts from cloud security tools in Q3 2025 were driven by identity-related weaknesses.

52% of all confirmed identity-based alerts were due to identity-related privilege escalation.

99% of cloud identities were found to be over-privileged, creating significant security risks.

33% of raw CSPM alerts were identity-related, contributing to the operational burden on security teams.

As of October 2025, there are over 14,700 Jenkins servers exposed to the internet that remain vulnerable to CVE-2024-23897.

71% of critical vulnerability alerts in Q3 2025 originated from just four legacy CVEs.