Supply chain attacks possible with Google Cloud Build vulnerability

Threat actors could leverage a critical design vulnerability in Google Cloud Build dubbed 'Bad.Build' to achieve privilege escalation and obtain unauthorized Google Artifact Registry code repository access, reports BleepingComputer.

access attacks bad bad.build bleepingcomputer build cloud cloud security code code repository critical design escalation google google cloud privilege privilege escalation registry reports repository supply supply chain supply chain attacks third party risk threat threat actors vulnerability