# Virtual machines, virtually everywhere - and with real security gaps

DevFeed: [Virtual machines, virtually everywhere - and with real security gaps](<https://devfeed.tech/articles/virtual-machines-virtually-everywhere-and-with-real-security-gaps-8344.md>)

Original publisher: [Read original article](<https://www.welivesecurity.com/en/business-security/virtual-machines-virtually-everywhere-real-security-gaps/>)

Author: Tomáš Foltýn

Published: 2026-03-25T10:00:00Z

Content type: article

Language: en

Sources: [WeLiveSecurity](<https://devfeed.tech/sources/welivesecurity.md>)

Topics: [Cloud](<https://devfeed.tech/topics/cloud.md>), [Security](<https://devfeed.tech/topics/security.md>), [cloud-infrastructure](<https://devfeed.tech/topics/cloud-infrastructure.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Azure](<https://devfeed.tech/topics/azure.md>), [on-prem](<https://devfeed.tech/topics/on-prem.md>), [Amazon EC2](<https://devfeed.tech/topics/amazon-ec2.md>), [Amazon S3](<https://devfeed.tech/topics/amazon-s3.md>)

Tags: [amazon-web-services-aws](<https://devfeed.tech/tags/amazon-web-services-aws.md>), [apis](<https://devfeed.tech/tags/apis.md>), [aws](<https://devfeed.tech/tags/aws.md>), [azure](<https://devfeed.tech/tags/azure.md>), [breach](<https://devfeed.tech/tags/breach.md>), [business-security](<https://devfeed.tech/tags/business-security.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [identity](<https://devfeed.tech/tags/identity.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [ip](<https://devfeed.tech/tags/ip.md>), [on-prem](<https://devfeed.tech/tags/on-prem.md>), [operations](<https://devfeed.tech/tags/operations.md>), [s3](<https://devfeed.tech/tags/s3.md>), [scale](<https://devfeed.tech/tags/scale.md>), [security](<https://devfeed.tech/tags/security.md>), [speed](<https://devfeed.tech/tags/speed.md>), [storage](<https://devfeed.tech/tags/storage.md>)

## AI overview

Cloud adoption has created a widespread virtual-machine sprawl problem. Unmanaged or poorly monitored VMs may miss operating-system updates, retain outdated access policies, and evade security operations, creating subtle risks alongside more visible threats such as misconfigured storage buckets and exposed APIs.

## Source excerpt

Cloud VMs offer unmatched speed, scale and flexibility - all of which could eventually count for little if they're left to fend for themselves