Orca's 2025 State of Cloud Security Report

The 2025 State of Cloud Security report, presented by Carahsoft and Orca Security, is based on data captured between January and May 2025. This report provides a comprehensive analysis of real-world cloud risks in production environments and code repositories across all major public clouds and industries worldwide.

Discover the most urgent cloud security trends and challenges, including:

• AI adoption and related security vulnerabilities
• Attack paths and lateral movement risks
• Sensitive data exposure and neglected cloud assets
• Vulnerabilities
• Overprivileged human and non-human identities
• Application security gaps
• Kubernetes misconfigurations
• Key recommendations