EUVD-2017-15264

Malware in sbrugna...

Experts Reveal Google Cloud Platform's Blind Spot for Data Exfiltration Attacks

Malicious actors can take advantage of "insufficient" forensic visibility into Google Cloud Platform GCP to exfiltrate sensitive data, a new research has found. "Unfortunately, GCP does not provide the level of visibility in its storage logs that is needed to allow any effective forensic...

CVE-2017-6199

Sandstorm (build prior to 0.203) is affected by CVE-2017-6199 due to insufficient validation of an email-address field, allowing remote attackers to bypass the Sandstorm organization restriction. The issue is tied to version pre-0.203; upgrading to build 0.203 or later is the documented remediati...