Cloud runtime threats slipping under the radar

Hey everyone, I’ve been thinking about cloud security lately. Most of the tools we use focus on misconfigurations or vulnerabilities caught pre-deployment, which is important, of course. But it seems like some of the biggest risks only show up when workloads are running. Stuff like: ● Application-layer attacks that sneak past pre-deployment checks ● Supply chain compromises that act maliciously only at runtime ● Stolen cloud credentials letting attackers move around quietly I found a blog that breaks down these threats in a really clear way: link Has anyone noticed these kinds of attacks in their own environments? Curious how you detect them before they cause real damage.