As we mark World Cloud Security Day, the scale and complexity of today’s cyber threat landscape, particularly amid rising geopolitical tensions, are becoming increasingly difficult to ignore. With teams now distributed across locations and cloud adoption continuing to accelerate (over 94–96% of enterprises used some form of cloud service in 2025–2026), organizations are managing more access points, and more risk, than ever before.
Cyberattacks are growing in both frequency and sophistication. Approximately 80–83% of organizations experienced a cloud security breach in the past year. Phishing and credential theft remain among the leading causes, while advances in artificial intelligence are making it easier for attackers to operate at scale. In 2026, there was an 89% increase in attacks by AI-enabled adversaries. For many organizations, this is exposing a fundamental weakness in how access to systems and data is controlled.
Increasingly, the focus must shift away from traditional perimeter-based security and toward identity. Identity & Access Management (IAM), alongside Zero Trust principles, is becoming central to how businesses approach security in a cloud-first world. The idea that no user or device should be automatically trusted, regardless of location, reflects the reality of modern working environments. One of the most persistent challenges is the continued reliance on passwords. Despite well-documented risks, they remain widely used, even as they continue to be a common point of failure. This should prompt a broader industry shift toward stronger, more resilient forms of authentication, including passwordless approaches and biometrics.
Ultimately, improving cloud security is less about any single technology and more about evolving how organizations think about access, risk, and responsibility. As threats continue to evolve, so too must the frameworks and behaviours that underpin how businesses protect their data.
About the Author
Ulf Ritsvall is CEO of biometric security company NEXT Biometrics

