Security News

Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage
2024-11-14 06:00

Google Cloud unveiled its Cybersecurity Forecast for 2025, offering a detailed analysis of the emerging threat landscape and key security trends that organizations worldwide should prepare for....

All Google Cloud users will have to enable MFA by 2025
2024-11-06 14:52

Google has announced that, by the end of 2025, multi-factor authentication (MFA) – aka 2-step verification – will become mandatory for all Google Cloud accounts. “Given the sensitive nature of...

Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users
2024-11-06 05:37

Google's cloud division has announced that it will enforce mandatory multi-factor authentication (MFA) for all users by the end of 2025 as part of its efforts to improve account security. "We will...

Google Cloud to make MFA mandatory by the end of 2025
2024-11-05 20:07

Google has announced that multi-factor authentication (MFA) will be mandatory on all Cloud accounts by the end of 2025 to enhance security. [...]

Google Cloud Expands Confidential Computing Portfolio
2024-10-02 18:23

Users of Google Cloud’s virtual machines can now get in-house attestation for VMs that offer AMD encrypted virtualization.

Google Cloud Document AI flaw (still) allows data theft despite bounty payout
2024-09-17 20:15

Chocolate Factory downgrades risk, citing the need for attacker access Overly permissive settings in Google Cloud's Document AI service could be abused by data thieves to break into Cloud Storage...

Google Cloud Strengthens Backup Service With Untouchable Vaults
2024-09-12 17:09

The backup and data recovery service adds an extra layer of protection in case a business encounters an attack or another major problem with Google Cloud storage.

Cirrus: Open-source Google Cloud forensic collection
2024-07-29 04:15

Cirrus is an open-source Python-based tool designed to streamline Google Cloud forensic evidence collection. It can streamline environment access and evidence collection in investigations involving Google Workspace and GCP. The tool simplifies incident response activities and enhances an organization's security posture.

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials
2024-07-27 05:47

Cybersecurity researchers have discovered a malicious package on the Python Package Index repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims. The package, named "Lr-utils-lib," attracted a total of 59 downloads before it was taken down.

Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform
2024-07-25 08:29

Cybersecurity researchers have disclosed a privilege escalation vulnerability impacting Google Cloud Platform's Cloud Functions service that an attacker could exploit to access other services and sensitive data in an unauthorized manner. "An attacker could escalate their privileges to the Default Cloud Build Service Account and access numerous services such as Cloud Build, storage, artifact registry and container registry," the exposure management company said in a statement.