LeakyLooker: Hacking Google Cloud's Data via Dangerous Looker Studio Vulnerabilities

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LeakyLooker: Critical Vulnerabilities in Google Looker Studio Exposed Tenable Research disclosed 'LeakyLooker', a set of nine cross-tenant vulnerabilities in Google Looker Studio, which could allow attackers to exfiltrate or modify data across Google services like BigQuery and Google Sheets. Google has since remediated all identified issues, but the vulnerabilities broke fundamental design assumptions, posing a significant risk to user data security. 6 sources 71