newsycanuse

Security experts found a major bug in Google Cloud

Experts

Security experts SADA claimed to have found a severe vulnerability in the Google Cloud Platform which has since been patched by the tech giant. 

Known as Asset Key Theft, the vulnerability would have potentially allowed threat actors to steal the private keys of Google Cloud Service Accounts. In a statement (opens in new tab), SADA said it believed the flaw “would have given attackers a persistent and reliable method for abusing a Google Cloud environment.”

SADA notified Google of the issue in its cloud hosting business via its Bug Hunters (opens in new tab) bounty program, where researchers can alert the tech giant to flaws they find in its products in a safe and secure manner.

API flaw

SADA believed that the issue was critical “due to the permission’s commonality with third-party cloud security tools, such as Cloud Security Posture Management (CSPM) tools, to gather cloud inventory data from the API.”

The flaw was found in the Google Cloud Platform API known as the Cloud Asset Inventory API. It affected all Google Cloud users who had enabled this API and who had cloudasset.assets.searchAllResources permissions on the applicable Google Cloud environment were exposed to this vulnerability.

Once SADA reported this to Google, it reproduced the error itself to confirm its existence, before patching the vulnerability. SADA warns, however, that customers still may have been impacted by it, and the threat may have persisted after the patch.

“Supporting our customers as they transform their organizations in the cloud means constant vigilance when it comes to security,” says SADA CTO Miles Ward. “No public cloud is immune from vulnerabilities, and we all must act fast, collaborate openly, and communicate transparently when we spot a vulnerability.”

“We commend Google Cloud for how quickly and thoroughly they responded when we brought this bug to their attention. We’re proud of the work SADA’s engineers put into ensuring that our customers’ data remains safe.”

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

Read More
Becki Latson

Latest

rock-cut

8 UNESCO-listed rock-cut religious sites you should visit at least once

0
8 UNESCO-listed rock-cut religious sites you should visit at least once For centuries, communities have carved places of worship, monasteries, shrines and monumental sculptures into cliffs and hillsides. Today, these rock-... 1/8 Ajanta Caves, Maharashtra, India | A UNESCO World Heritage Site since 1983, the Ajanta Caves comprise 30 rock-cut Buddhist monuments dating from the
Cryptos

Top Cryptos Other Than Bitcoin and Ethereum Poised to Benefit From the CLARITY Act

0
The upcoming CLARITY Act is widely expected to reshape the U.S. crypto market by providing regulatory clarity for digital assets. While Bitcoin (BTC) and Ethereum (ETH) are likely to remain the primary institutional beneficiaries, several altcoins could also gain from increased institutional participation. From cryptos with active ETF ambitions to blockchain ecosystems powering tokenization and
After

ONDO Price Eyes $0.665 After Breakout and Major SBI Tokenization Deal

0
You are here: Home / Cryptocurrency News / ONDO Price Eyes $0.665 After Breakout and Major SBI Tokenization Deal Ondo Finance (ONDO) is gaining bullish momentum after confirming a breakout from its downtrend, with analysts watching for continued strength for the ONDO price. Meanwhile, its partnership with Japan’s SBI Group advances real-world asset tokenization and
Obligations

Payroll Tax Obligations for Small Businesses

0
As a small business owner, you face various payroll tax obligations that can impact your bottom line. Comprehending what constitutes payroll taxes, the responsibilities you have as an employer, and the deadlines for payments is fundamental. From FICA contributions to unemployment taxes, managing these requirements accurately is vital. Failure to comply could lead to penalties

Newsletter

Don't miss

rock-cut

8 UNESCO-listed rock-cut religious sites you should visit at least once

0
8 UNESCO-listed rock-cut religious sites you should visit at least once For centuries, communities have carved places of worship, monasteries, shrines and monumental sculptures into cliffs and hillsides. Today, these rock-... 1/8 Ajanta Caves, Maharashtra, India | A UNESCO World Heritage Site since 1983, the Ajanta Caves comprise 30 rock-cut Buddhist monuments dating from the
Cryptos

Top Cryptos Other Than Bitcoin and Ethereum Poised to Benefit From the CLARITY Act

0
The upcoming CLARITY Act is widely expected to reshape the U.S. crypto market by providing regulatory clarity for digital assets. While Bitcoin (BTC) and Ethereum (ETH) are likely to remain the primary institutional beneficiaries, several altcoins could also gain from increased institutional participation. From cryptos with active ETF ambitions to blockchain ecosystems powering tokenization and
After

ONDO Price Eyes $0.665 After Breakout and Major SBI Tokenization Deal

0
You are here: Home / Cryptocurrency News / ONDO Price Eyes $0.665 After Breakout and Major SBI Tokenization Deal Ondo Finance (ONDO) is gaining bullish momentum after confirming a breakout from its downtrend, with analysts watching for continued strength for the ONDO price. Meanwhile, its partnership with Japan’s SBI Group advances real-world asset tokenization and
Obligations

Payroll Tax Obligations for Small Businesses

0
As a small business owner, you face various payroll tax obligations that can impact your bottom line. Comprehending what constitutes payroll taxes, the responsibilities you have as an employer, and the deadlines for payments is fundamental. From FICA contributions to unemployment taxes, managing these requirements accurately is vital. Failure to comply could lead to penalties
proven

5 Proven Strategies for Ecommerce Customer Acquisition

0
If you’re looking to boost customer acquisition for your eCommerce business, you need a clear plan. Start by leveraging targeted paid ads to connect with users ready to buy. Don’t overlook SEO, as it enhances your organic visibility. Consider email marketing with segmented lists for more personalized outreach. Collaborate with influencers to reach niche audiences
newsycanusehttps://newsycanuse.com

Want Your Business to Be Seen Everywhere? Meet Tonia Ryan, Creator of Fix Your Search

Some people are good at their jobs. Then there is Tonia Ryan, who has turned “getting found online” into something close to magic. She is the creator of Fix Your Search, and if you have ever wondered why some businesses pop up everywhere while others seem invisible...
Read more

Grey Business processes $61 million as stablecoins dominate payments

Grey Business enables startups and SMEs to open US Dollar (USD) corporate accounts, send and receive international payments, convert currencies, and transact using stablecoins such as USDC and USDT...
Read more

Utah Marketers to Host Free Business Networking Event in Layton on June 24

The custom web design company is hosting free monthly networking events for Northern Utah business leaders, with the next event scheduled for June 24 from 4 to 6 p.m. Utah Marketers is hosting a free local business networking event on June 24 from 4 to 6 p.m. at the company’s Layton office. The event is
Read more