
- Unit 42 reveals misconfigured Vertex AI agents in Google Cloud can be hijacked into “double agents”
- Excessive default permissions let attackers pivot, access Cloud Storage, and expose proprietary Google code
- Google updated documentation, urging customers to use Bring Your Own Service Account (BYOSA) instead of defaults