One day after Twilio announced a breach after an attacker successfully stole employee credentials in a phishing scam, Cloudflare posted on its blog Tuesday that it believes its employees were targeted in a similar attack. 

Cloud-based communications platform Twilio said a limited number of customer accounts were accessed after a sophisticated phishing attack successfully nabbed employee credentials.

Only 16% of respondents ranked on the Ermetic Cloud Security Model at the top two levels, and 80% of companies said they lack a dedicated security team responsible for protecting cloud resources from threats.

Security industry analysts pointed out that ZeroFox may be the only “pure” cyber threat intelligence (CTI) company to have ever gone public.

Security researchers say these cryptoming attacks are focused less on the average person’s computers and more on the large cloud providers.

Security researchers say Twitter API keys case stands as one in a long line of cloud security incidents caused by misconfigured APIs.

A security researcher late last week disclosed that they found two vulnerabilities in the Google Cloud Platform, one on DevSite, the other on Google Play — bad code that could have led to hijacked accounts via cross-site scripting (XSS) attacks.