Independent photography is blocked and require authentication to access. They are used to store relevant apps, configuration, or code.
An employee, AKA service agent, “a special service account made and managed by Google Cloud,” said Liv Matan, Tenable Top Tenable Researcher. “If an attacker receives some permits within the victim’s project – directly Run.services.update including iam.serviceaccounts.acrasPermissions – They can change the cloud running service and use a new update. “
By doing so, they are able to specify (through an injuries of cruel code) any recorded image stored in the victim registers, Matan was added.
Source link