storage.objectcreator

• Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

  Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article for more. The post Pickle in the Middle – Hijacking Vertex AI Model Uplo

• The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration

  The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data streams across major CSPs. The post The Global Namespace Risk: Unive

All reports →

• Connector · intel_report_ingest2