Bad.Build Flaw in Google Cloud Build Raises Concerns of Privilege Escalation

Cybersecurity researchers have uncovered a privilege escalation vulnerability in Google Cloud that could enable malicious actors tamper with application images and infect users, leading to supply chain attacks.
The issue, dubbed Bad.Build, is rooted in the Google Cloud Build service, according to cloud security firm Orca, which discovered and reported the issue.
"By abusing the flaw and enabling

application attacks bad build cloud cloud security cybersecurity enable escalation flaw google google cloud images infect issue malicious malicious actors orca privilege privilege escalation researchers security service supply supply chain supply chain attacks vulnerability