
A new report from Check Point Software Technologies Ltd. (NASDAQ: CHKP) highlights critical vulnerabilities in enterprise cloud security, driven by outdated models, tool sprawl, and unpreparedness for AI-driven attacks.
The 2025 Cloud Security Report, based on a survey of 937 CISOs and IT leaders worldwide, reveals that 65% of organizations faced a cloud-related security incident in the past year, up from 61% the previous year.
However, only 9% detected these incidents within an hour, and just 6% resolved them in that time, leaving systems exposed to prolonged breaches.
The report underscores the challenges of securing increasingly complex cloud environments, with 62% of organizations adopting cloud edge technologies, 57% using hybrid cloud, and 51% operating in multi-cloud setups.
Legacy perimeter-based defenses are struggling to keep pace, particularly as 71% of respondents manage over 10 cloud security tools, and 16% juggle more than 50. This fragmentation contributes to alert fatigue, with over half of organizations facing nearly 500 daily alerts, slowing response times.
AI-driven threats are another growing concern. While 68% of respondents prioritize AI in their cyber defense strategies, only 25% feel equipped to counter such attacks. Additionally, only 17% have full visibility into lateral movement within cloud environments, allowing attackers to operate undetected once inside.
Detection often relies on employees or external reports rather than automated tools, with only 35% of incidents identified through security platforms.
Paul Barbosa, Check Point’s VP of Cloud Security, emphasized the need for change: “Security teams are chasing an ever-moving target. Fragmented tools and legacy approaches can’t keep up with complex cloud environments and evolving AI threats. Unified, intelligent, and automated defenses are critical for today’s decentralized world.”
Internal challenges further complicate the issue, with 54% of respondents citing rapid technological change and 49% noting a shortage of skilled professionals as major hurdles. Tool fragmentation and poor platform integration, reported by 40%, exacerbate delays and blind spots.
To address these gaps, Check Point advocates for decentralized, prevention-first strategies, including consolidating tools, adopting AI-powered threat detection, and deploying real-time telemetry for better visibility. The company’s CloudGuard and Infinity Platform are positioned as solutions to unify defenses, automate responses, and ensure consistent policy enforcement across cloud environments.
Deryck Mitchelson, Check Point’s Global CISO, warned, “Attackers move in minutes, but defenders respond in days. CISOs must consolidate tools, gain visibility into lateral movement, and prepare for AI-driven threats to avoid losing control of the cloud.”
The full report, conducted by Cybersecurity Insiders in early 2025, offers detailed insights and actionable advice for securing hybrid, multi-cloud, and SaaS environments. It is available on Check Point’s website.