This article is published for educational purposes only, to raise awareness among information security professionals. The research was part of an official bug bounty program on a major platform. We notified the cloud provider about the vulnerabilities in line with our responsible disclosure policy, and all security issues we found were fixed in full.
An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
About this summary. This is a short excerpt from the description that Kaspersky Securelist published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://securelist.com/cloud-infrastructure-isolation-bypass/121609/
Source attribution: headline and facts are from Kaspersky Securelist (securelist.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
All the security risks Anthropic is worried about before its IPO
Anthropic said its AI systems could drastically reshape the software and cybersecurity sectors in the “near term,” while also laying out a litany of cybersecurity and…
Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale. Australia’s top…
Hacker breached Capcom ID – obtained data from 11 million accounts and started changing passwords
The following is a machine translation of an article that originally appeared in Russian. Boris Piletskiy writes: On October 22, Capcom acknowledged a massive user data…
Tailscale warns of SSH flaws allowing root privilege escalation
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root…
Introducing the Cloudflare PHP Capture the Flag challenge
Last week was one for the Internet security history books. First, eight eMudhra intermediate certificates were compromised, creating the possibility of forged…
Introducing the Wordfence Threat Response Team: A New Way to Report Active Threats in the WordPress Ecosystem
When a new threat to WordPress sites emerges, the first hours matter most. Today we’re introducing the Wordfence Threat Response Team, led by Alex Thomas and made up of…