Cloud Security Spotlight

October 2025

1. The Hidden Gap: No Runtime Protection on Servers

We’re still seeing too many cloud workloads running without runtime protection. Traditional endpoint and network security tools stop short when it comes to detecting active attacks against cloud servers. Runtime protection is designed to defend against threats as they happen — blocking exploits, fileless malware, credential theft, and lateral movement before they spread.
With SentinelOne, runtime protection continuously monitors system behaviour, identifies abnormal activity, and stops threats in real time. This is no longer a nice-to-have; it’s an essential safeguard in the modern cloud.

2. Invisible Vulnerability in Container Images 

Our cloud security assessments consistently uncover large numbers of unpatched vulnerabilities buried in container images. The issue isn’t just about patching — many base images ship with unnecessary packages that introduce risk.
Best practice is twofold:

• Patch regularly to keep images current.
• Harden your images by stripping out unneeded software and libraries.

We’ve recently partnered with Chainguard, who specialise in secure, minimal container images, to help customers dramatically reduce their exposure.

Security Is About Reducing Risk

No IT team — especially smaller ones — can realistically fix everything at once. Security is about steadily reducing risk exposure, step by step. Each improvement you make lowers the likelihood of a major incident. By taking a gradual approach, or by leveraging our managed security services to accelerate that process, you’ll steadily move your organisation toward a much stronger risk position. The key is to start small, but start now.

Quick Wins to Reduce Risk Exposure

Here are four actions you can take immediately to tighten your security posture:

1. Rotate access keys regularly.
2. Remove unused IAM users.
3. Lock down S3 buckets (avoid public exposure where practical) and enable MFA delete.
4. Remove unused software from migrated servers (e.g., VMware tools) to cut down vulnerabilities and patching overhead.

Take the Next Step — Free Security Assessment

If you’d like to see exactly where your risks lie, we offer a free cloud security assessment. This will not only provide you with clear insights into your current security posture but also showcase the power of the SentinelOne platform running in your own environment. It’s the fastest way to see where to focus first.

Thanks for reading!

Kelly Harman

Customer Success Manager, Cloud Bridge