TGViewer
CloudSec Wine CloudSec Wine @cloud_sec · 2.27K subscribers
Post #322 738
🔴 Lateral Movement in Google Cloud: Abusing the Infamous Default Service Account Misconfiguration

This post covers how a malicious actor can conduct lateral movement in Google Cloud across compute engine instances using the default service account.

https://orca.security/resources/blog/lateral-movement-google-cloud-default-service-account

#gcp
Orca Security Google Cloud: Default Service Account Misconfiguration This post covers how a malicious actor can conduct lateral movement in Google Cloud across compute engine instances using the default service account.
Open in Telegram All posts from @cloud_sec
More from @cloud_sec
  1. Oct 13, 2026👩‍💻 Azure's Weakest Link - Five Full Cross-Tenant Compromises Five critical Azure cross-…
  2. Oct 12, 2026🤖 The AI SDLC transformation playbook Atlassian's shared their own version of an AI SDLC…
  3. Oct 9, 2026⚠️ Discovering and exploiting a remote code execution vulnerability in OpenCode Datadog Se…
  4. Oct 8, 2026🤖 How DigitalOcean Manages Credentials for Autonomous Agents DigitalOcean Managed Agents…
  5. Oct 7, 2026👩‍💻 Storm-3168: Agentic-driven cloud attacks using compromised service principals Storm-…
  6. Oct 6, 2026🤖 Securing the software factory at machine speed GitLab's CISO argues that agentic AI dev…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →