TGViewer
CloudSec Wine CloudSec Wine @cloud_sec · 2.27K subscribers
Post #127 1.45K
🔴Lateral Movement & Privilege Escalation in GCP; Compromise Organizations without Dropping an Implant

"In this talk, we'll demonstrate several techniques to perform identity compromise via the ActAs permission, privilege escalation, lateral movement, and widespread project compromise in Google Cloud. We will also release tools for exploitation."

https://youtu.be/kyqeBGNSEIc

#gcp
YouTube Lateral Movement & Privilege Escalation in GCP; Compromise Organizations without Dropping an Implant Google Cloud's security model in many ways is quite different from AWS. Spark jobs, Cloud Functions, Jupyter Notebooks, and more default to having administrative capabilities over cloud API's. Instead of defaulting to no capabilities, permissions are granted…
More from @cloud_sec
  1. Oct 16, 2026👩‍💻 3 lessons from frontier AI vulnerability research FORGE Lab reports 140 Windows CVEs…
  2. Oct 14, 202620 октября в 12:00 (мск) пройдёт бесплатный вебинар «Мониторинг событий безопасности в MWS…
  3. Oct 14, 2026🔶 Introducing Strands Box: AI agent sandboxes powered by Dogwood Strands Box is an open s…
  4. Oct 13, 2026👩‍💻 Azure's Weakest Link - Five Full Cross-Tenant Compromises Five critical Azure cross-…
  5. Oct 12, 2026🤖 The AI SDLC transformation playbook Atlassian's shared their own version of an AI SDLC…
  6. Oct 9, 2026⚠️ Discovering and exploiting a remote code execution vulnerability in OpenCode Datadog Se…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →