Cloud Threat Highlights: H1 2026

In the first half of 2026, cloud security threats increased dramatically, with supply-chain attacks (attacks targeting the software development process to compromise many organizations at once) more than doubling and now making up 25% of major incidents. A group called TeamPCP ran a particularly widespread campaign that stole developer credentials from poisoned packages on platforms like npm and PyPI, then used those credentials to break into cloud environments and steal more secrets, creating a chain reaction of compromises affecting thousands of organizations.