Chocolate Factory downgrades risk, citing the need for attacker access
Overly permissive settings in Google Cloud's Document AI service could be abused by data thieves to break into Cloud Storage buckets and steal sensitive information.
The issue exists in Document AI, a Google Cloud service that uses machine learning to extract information from documents and aims to make it easier and faster for businesses to analyze and process large numbers of documents. Customers can use either pre-trained models or create their own, and they can process documents stored in Google Cloud Storage via both standard jos or batch processing.
The permissions granted to the service agent allow it to access any Google Cloud Storage bucket within the same project, thus allowing the service to move data that the user normally wouldn't have access to."This capability enables a malicious actor to exfiltrate data from GCS to an arbitrary Cloud Storage bucket, bypassing access controls and exfiltrating sensitive information," Traxler wrote.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Toxic cloud of gas cloud to engulf UKThe Met Office has warned that a plume of sulphur dioxide - a toxic gas that can cause throat irritation and nausea - will shroud the UK
Read more »
Amazon shoppers snap up boxes of 36p Lindor chocolate truffles as price dropsIncluded in the box is the classic milk chocolate flavour, as well as white chocolate and milk chocolate and caramel, pistachio and extra dark Lindor balls
Read more »
Researchers develop new approach to document genetic ancestryUniversity of Glasgow researchers have helped to develop a new method for understanding the relationships between different DNA sequences and where they come from.
Read more »
Jay Slater's father sets up TikTok account to document Tenerife searchJay Slater's father Warren Slater has set up a TikTok account to document the family's search for the teenager, and asked that conspiracy theorists let him rest in peace.
Read more »
Jay Slater's father creates TikTok account to document search for sonWarren Slater, father of missing teenager Jay Slater who tragically died on Tenerife two months ago, has launched a TikTok account to share videos from their search efforts. He urges conspiracy theorists to 'allow Jay to rest in peace' and shares clips documenting the family's hunt around the Spanish island.
Read more »
Jay Slater's father sets up TikTok account to document Tenerife searchJay Slater's father Warren Slater has set up a TikTok account to document the family's search for the teenager, and asked that conspiracy theorists let him rest in peace.
Read more »