by
July 19, 2023

Google Cloud Build Flaw Enables Privilege Escalation, Code Tampering

Google’s fix to the Bad.Build flaw only partially addresses the issue, say security researchers who discovered it.

Cyber News, Cyber Threat Trends

by
July 19, 2023

GitHub Actions

ACM.255 Triggering an update to a website when code gets checked into GitHub — by you or attackers Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends

by
July 19, 2023

Microsoft hit by Storm season – a tale of two semi-zero days

The first compromise didn’t get the crooks as far as they wanted, so they found a second one that did…

Cyber News, Cyber Threat Trends

by
July 19, 2023

Attackers can abuse Google Cloud Build to poison production environments

Researchers warn that a permission associated with the Google Cloud Build service in Google Cloud can be easily abused by attackers with access to a regular account to elevate their privileges and potentially poison container images used in production environments. Google Cloud Build is a CI/CD platform that allows organizations and developers to execute code […]

Cyber News, Cyber Threat Trends