Back Issues This Week → Calendar → Current Issue → Popular →

Google's Mandiant security team has identified a rising threat from exposed serverless cloud functions that lack authentication, a risk growing as generative AI adoption accelerates.

Attackers exploit these functions through application-level attacks to extract secrets and service account tokens, potentially gaining access to entire cloud environments.

Researchers recommend multi-layered defenses including code scanning, least-privilege IAM controls, and isolating public-facing services in dedicated cloud projects.

Mandiant notes that hardening Cloud Run services is only one part of a secure architecture, and defense-in-depth using VPC controls is essential to prevent lateral movement after compromise.