By By David Ramel08/24/2026
Publication Date: 2026-08-24 00:00:00
Identity, AI Lead CSA’s 2026 Cloud Threat List
Identity and access management has overtaken misconfiguration as the top cloud security concern in the Cloud Security Alliance’s 2026 ranking, while two artificial intelligence-related issues entered the list for the first time. The CSA Top Threats Working Group surveyed 507 security professionals and used their responses to rank 23 cloud security issues, producing a Top 11 led by identity, AI, third-party resources and APIs.
The findings are detailed in CSA’s Top Threats to Cloud Computing Survey Report 2026. The report is the latest installment in the organization’s Top Threats research series, which is intended to give organizations an up-to-date, expert-informed view of cloud security risks, threats and vulnerabilities so they can make risk-management decisions about cloud adoption strategies.
CSA says the 2026 results show a change in the cloud threat landscape, with identity, AI, software supply chains and interconnected cloud ecosystems displacing concerns more closely tied to underlying infrastructure and cloud service providers. Denial-of-service attacks, shared technology vulnerabilities, cloud service provider data loss, unauthenticated resource sharing and limited cloud visibility or observability all ranked…

