Google Cloud Azure hit by confused deputy flaws researcher warns

The article discusses vulnerabilities known as 'confused deputy' flaws that persist in Google Cloud and Microsoft Azure, which allow attackers to gain elevated permissions and bypass access controls. The vulnerabilities were discovered by security researcher Justin O'Leary, who identified two major issues: one in Azure's Kubernetes backup service and another in Google Cloud's Config Connector tool.

Despite reporting these flaws, neither company acknowledged them adequately, raising concerns about security practices in cloud environments. O'Leary highlights that these issues indicate systemic problems in cloud architecture and suggests that credential scoping and trust boundaries could mitigate such risks.