Google Cloud Build bug lets hackers launch supply chain attacks

A critical design flaw in the Google Cloud Build service discovered by cloud security firm Orca Security can let attackers escalate privileges, providing them with almost nearly-full and unauthorized access to Google Artifact Registry code repositories. [...]

access attackers attacks bug build cloud cloud security code code repositories critical design flaw google google cloud hackers orca orca security privileges registry repositories security service supply supply chain supply chain attacks unauthorized access