Serious cloud vulnerabilities quadruple in nine months, Datadog report finds
DDOG•Datadog's 2026 cloud security report found the median number of high or critical vulnerabilities rose from four in February to around 16 in November. It also found that 60% of organizations run cloud applications with package versions released less than 24 hours earlier.
1. Cloud security findings
The report found that cloud workloads depend on an average of 149 software packages, with indirect dependencies accounting for more than half. Nearly half of organizations using Google Gemini use long-lived API keys, compared with 17% of Amazon Bedrock users. AWS data perimeter adoption reached 55% of organizations using the platform, up from 40% in 2025.
