Document AI, a Google Cloud service for file processing, had a worrying security flaw which allowed threat actors to steal sensitive data from people’s cloud storage accounts, and possibly even smuggle malware inside.

Attackers could have exploited a dependency confusion vulnerability dubbed "CloudImposer" affecting various Google Cloud services to execute a sprawling supply chain attack via just one malicious Python code package.

The post Google Cloud Platform vulnerability discovered, prompting security update appeared first on Android Headlines.

Google patched a critical remote execution vulnerability in its cloud platform Cloud Composer service, "CloudImposer," which could have allowed attackers