Cloud Web Applications Threat Matrix

Microsoft Maps a Unified Threat Landscape for Cloud Web Applications and Serverless Environments

Microsoft introduced the Cloud Web Applications Threat Matrix, aligned with MITRE ATT&CK tactics, to organize attack paths spanning application code and deployment pipelines through workload identities and connected cloud services. The framework focuses on helping security teams identify visibility gaps and prioritize hardening and investigation.