Critical alerts related to the cloud have increased by 235% in 2024 compared to the previous year, a data that is extracted from the latest report by the insurer QBE, “Cyber threats in the cloud, Strategies against digital disruption”, and which highlights the growing exposure of organizations to an increasingly powerful and vulnerable technological environment.
The cloud, an engine of growth with exponential risks
The study highlights that the global cloud services market will exceed $5 trillion in 2034, compared to the $912 billion expected for 2025. This dizzying growth is accompanied by an equally accelerated expansion in data management. By 2025, the total volume of information stored in the world will reach 200 zettabytes, with half already hosted in the cloud. Just a decade ago, that percentage was 10%.
The massive concentration of data in cloud environments has multiplied the attractiveness of these services for cyber attackers. These are not just attacks on storage, but a more sophisticated offensive that seeks to exploit the vulnerabilities of collaborative tools, hybrid environments and platforms that combine local services with the cloud.
Cloud-related critical alerts have increased by 235% in 2024 compared to the previous year
Artificial intelligence, ally and threat
Artificial intelligence is transforming both defense and offense in the cyber sphere. Generative AI, in particular, has become a double-edged tool. The QBE report warns that cybercriminals use it to perfect social engineering scams, deepfakes and phishing campaigns. By 2024, nearly 10% of successful cyberattacks incorporated some type of AI-generated content, demonstrating the speed with which this technology has been integrated into attack methods.
Phishing and corporate email compromise (BEC) continue to top the list of incidents in cloud environments, although ransomware has expanded its reach into new attack surfaces. Collaborative tools, so essential for remote work and productivity, have become a critical vector.
Shared vulnerabilities and global disruption
One of the most worrying points of the QBE report is the systemic impact that incidents have on technology service providers. Disruptions or breaches in cloud platforms, identity providers or managed services affect not just one company, but thousands of customers around the world. A single configuration error or faulty update can lead to multi-million dollar operational losses and cripple entire industries.
Javier Redondo, Director of Financial Lines and Cyber Risks at QBE Spain, warns that the magnitude of the challenge requires a change in mentality. “At QBE Spain we help our clients face cyber risks with resilient solutions. The report highlights threats such as ransomware, GenAI and cloud vulnerabilities. Our commitment is to anticipate, protect operations and reinforce business continuity.”
Risk management, key in the age of AI
The insurer insists that cyber resilience cannot be based solely on technological tools. It is necessary to integrate risk management from the design of the systems. The most effective measures include strengthening identity and access management (IAM) with phishing-resistant multi-factor authentication, continuous configuration auditing, and full encryption of data, both at rest and in transit.
Additionally, the report highlights the importance of having up-to-date threat intelligence and incident response plans that are regularly tested. Preparation is as important as prevention. It is also recommended to strengthen third-party management, a critical point in an ecosystem that is increasingly interconnected and dependent on external suppliers.
