AbstractAbstract - This research focuses on the increasing security threats and challenges in cloud-based software systems and potential solutions. Topics talked about are data breaches, insecure APIs/shared technology vulnerabilities in a multi-tenant environment and insider threats. This research clearly indicates the glaring requirement for strong security practices, including encryption, Identity and Access Management (IAM), and continuous monitoring to diminish risks. In addition to the Typo3 example, we can see in case studies such as Capital One and Equifax the devastating effects of misconfigurations (CapitalOne) or unpatched vulnerabilities (Equifax). Other types of emerging threats are discussed, like ransomware, container vulnerabilities and supply chain attacks — all related to the dynamic nature of cloud environments as well. Moreover, a side-by-side comparison with the major Cloud Service Providers (CSPs) — AWS, Azure and Google Cloud.
Keywords - Security challenges, Software, Cloud, AWS, Cloud Service Providers (CSPs).