Issue 227: GhostToken on Google Cloud, Gartner on zero trust, API authentication
Brief
This week, we have news of the so-called “GhostToken” vulnerability affecting Google Cloud. We also have articles from Gartner on a report on zero trust not being a silver bullet, how authentication attacks threaten API security, and finally, why API security is everywhere except where you need it.
Vulnerability: GhostToken vulnerability in Google Cloud
This week, we have news of the so-called GhostToken vulnerability , which could allow attackers to target Google Cloud users via the application marketplace. According to the researchers at Astrix who discovered the vulnerability, it could have allowed attackers to access the target account’s Google Drive, Calendar, Photos, Google Docs, Google Maps, and other Google Cloud Platform services.