Security · 1h ago
'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure
A category of vulnerabilities known as 'confused deputy' attacks allows attackers to gain admin-level permissions in Google Cloud and Microsoft Azure, bypassing access controls. The flaws exploit the trust between cloud services, enabling privilege escalation. Both providers have been notified but patches remain incomplete.
Meridian48 take
The persistence of these flaws highlights a fundamental design weakness in cloud IAM that vendors have been slow to address.
Read the full reporting
'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure →
Dark Reading
cloud-securityprivilege-escalation