storage.objectviewer

• Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

  Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article for more. The post Pickle in the Middle – Hijacking Vertex AI Model Uplo

• The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration

  The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data streams across major CSPs. The post The Global Namespace Risk: Unive

• The Risk of Exposed Cloud Functions and How to Harden

  The Risk of Exposed Cloud Functions and How to Harden Written by: Corné de Jong Introduction Mandiant security assessments frequently identify publicly exposed serverless applications that lack authentication, often as a result of specific business requirements. Serverless deplo

All reports →