Shadow IT and misconfigured application programming interface accounted for the vast majority of security incidents in the cloud last year, according to the 2021 IBM Security X-Force Cloud Threat Landscape Report.
https://www.securitymagazine.com/articles/96116-misconfigured-apis-make-up-two-thirds-of-cloud-breaches