Google Cloud Build bug lets hackers launch supply chain attacks (www.bleepingcomputer.com)
from tedu to cloudsec on 25 Jul 2023 16:30
https://azorius.net/p/pnQN961452W7D8k2Rc

A critical design flaw in the Google Cloud Build service discovered by cloud security firm Orca Security can let attackers escalate privileges, providing them with almost nearly-full and unauthorized access to Google Artifact Registry code repositories.

#cloudsec