This document identifies and categorizes various vulnerabilities and threats in cloud computing. It discusses 8 categories of threats: abuse of resources, insecure interfaces, technology sharing issues, data leakages, service hijacking, malicious insiders, data separation, and unknown risks. For each threat, it provides details on how attackers can exploit vulnerabilities as well as recommendations for cloud service providers to mitigate risks, such as implementing strong access controls, encryption, monitoring, and auditing. The conclusion states that while cloud computing is widely adopted, organizations must still be aware of security issues and work to address them.