CrowdStrike’s 2026 State of Cloud Detection and Response survey, supported by concurrent threat intelligence showing a 266% year-over-year rise in cloud-conscious intrusions by state-nexus actors, documents three structural defensive gaps — incomplete control-plane visibility, inability to baseline normal cloud behavior, and fragmented tooling — that are enabling attackers to exfiltrate data from cloud environments before defenders can detect and respond. No CVE is assigned; this is a systemic program-level finding affecting multi-cloud and hybrid environments broadly.