---
title: Cloud and SaaS Environments Are Now Attackers' Favorite Targets
description: Darktrace warns of rising threats in cloud and SaaS with identity compromise and AI-driven attacks leading the charge in 2026.
canonical_url: https://codekeeper.co/ticker/cybersecurity-threats-2026-cloud-saas-ai
---

# Cloud and SaaS Environments Are Now Attackers' Favorite Targets

Darktrace warns of rising threats in cloud and SaaS with identity compromise and AI-driven attacks leading the charge in 2026.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Aug 4, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Cybersecurity firm Darktrace says cloud and SaaS environments were attackers' top targets in the first half of 2026 — and increasingly their preferred operating environment, not just their destination. The shift is notable: threat actors have moved away from malware and vulnerability exploitation toward identity compromise, now extending attacks to email authentication, AI gateways, and software supply chains. One compromised SaaS account triggered malicious activity across email, SaaS, and network layers simultaneously — the kind of attack that's hard to catch because no single indicator looks alarming alone. Attackers also hijacked Axios, a JavaScript library downloaded 100 million times weekly, to spread remote access trojans. Email phishing is getting sharper too — two-thirds of phishing emails now pass DMARC validation. Meanwhile AI-generated malware, and JadePuffer — which researchers at Sysdig claim is the first ransomware campaign driven entirely by a large language model — signal that AI is closing the gap between vulnerability discovery and exploitation. **Source:** [Infosecurity Magazine](https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcybersecurity-threats-2026-cloud-saas-ai%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[SymJack Attack Hijacks AI Coding Agents to Deliver Supply Chain Attacks Aug 12, 2026](https://codekeeper.co/ticker/symjack-ai-attack-on-coding-agents)

[South Staffs Water Hack Left Customers Dealing With Identity Theft and Broken Trust Aug 12, 2026](https://codekeeper.co/ticker/south-staffordshire-water-data-breach)

[Vulnerabilities Unpatched Steam Flaw Gives Local Windows Users SYSTEM Access Sep 18, 2026](https://codekeeper.co/ticker/steam-zero-day-escalation-risk)

[Critical JetBrains TeamCity Flaw Lets Attackers Run Commands Without Logging In Aug 11, 2026](https://codekeeper.co/ticker/jetbrains-teamcity-critical-vulnerability-patch)