Another month, another wake-up call for cloud security teams. In July 2025, attackers took advantage of legacy systems, cloud misconfigurations, and weak vendor ecosystems. This roundup features only verified incidents from trusted sources — and how CloudWize, as your Cloud Security Center of Excellence, helps detect, prevent, and respond fast.
Allianz Life (US) — Third-Party CRM Cloud Breach
Date: July 1, 2025
Industry: Insurance / Financial Services
What happened:
Attackers compromised a third-party cloud CRM platform used by Allianz Life’s U.S. business unit, exposing the data of over 1.4 million customers, financial professionals, and employees. Allianz confirmed the incident and stated internal systems were not affected.
Root cause:
Third-party vendor compromise with weak access controls.
CloudWize Fix:
CloudWize maps and monitors third-party connections and external SaaS integrations, alerting instantly on abnormal access behavior and drift in privileges.
Microsoft SharePoint Zero-Day Exploited by APTs
Date: July 10, 2025
Industry: Government / Infrastructure
What happened:
Chinese threat groups exploited a critical SharePoint vulnerability (CVE‑2025‑53770/53771), enabling remote code execution. Victims included U.S. federal agencies such as the Department of Energy and NNSA. Microsoft has since patched the flaw.
Root cause:
Unpatched legacy systems exposed to the internet.
CloudWize Fix:
Our Vulnerability Dashboard identifies missing patches, ranks risks by exploitability, and provides guided remediation steps with full context.
Ingram Micro — Ransomware Hits Global Tech Giant
Date: July 16, 2025
Industry: Tech / Supply Chain
What happened:
Ransomware group “SafePay” infiltrated Ingram Micro’s systems via VPN, stole 3.5 TB of data, and temporarily shut down operations. The attackers claim to have accessed customer and AI platform data.
Root cause:
Exposed VPN endpoint and weak network segmentation.
CloudWize Fix:
With External Exposure Mapping, CloudWize highlights vulnerable entry points — including VPN gateways — and helps teams enforce segmented micro-perimeters.
U.S. National Guard — Long-Term Breach by Salt Typhoon
Date: July 25, 2025
Industry: Government / Defense
What happened:
The Salt Typhoon APT group maintained access to National Guard systems for over a year. More than 1,400 network configuration files were stolen from 70+ infrastructure-related targets.
Root cause:
Lack of anomaly detection and identity monitoring.
CloudWize Fix:
Our Behavioral Analytics engine would have detected long-term identity abuse and flagged uncharacteristic network activity linked to credential persistence.
Final Thought: Verified Incidents. Preventable Threats.
These aren’t hypothetical scenarios. They happened — in the real world — to major players.
That’s why CloudWize exists. As the first Cloud Security Center of Excellence, we help you:
Detect misconfigurations in real time
Lock down identities, secrets, and infrastructure
Prioritize risks based on context, not noise
Protect your cloud — before it’s breached.
Request a security assessment.
