Tenable, the exposure management company, announced its State of Cloud and AI Security 2025 report, revealing that the rapid growth of hybrid, multi-cloud and AI systems has outpaced cloud security strategies, creating new layers of complexity and risk.
According to the study, 82% of organizations now operate hybrid environments spanning on-premises and cloud, and 63% use more than one cloud provider, managing an average of 2.7 environments. With each IT environment bringing its own tools, policies and shared responsibility models, the cloud and AI workload sprawl creates complex and fragmented systems that leave major blind spots for security teams. The result is disjointed visibility, inconsistent identity governance, and gaps in risk monitoring that attackers can exploit. As AI-driven workloads add more layers of complexity, identity has become one of the biggest sources of weakness in this environment, with inconsistent governance and excessive permissions regularly cited as drivers of cloud breaches.

This shift is driven by cost pressures, regulatory requirements, and performance needs and, in some cases, has led organizations to…