Back Thehackernews

Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts

Thehackernews •[email protected] (The Hacker News) • March 31, 2026

New 2026 Ponemon research reveals where mature identity programs still fall short and what leading organizations are doing to close the gap.

AI agents need identity, but most teams are still figuring out how to implement it. This session cuts through the noise with a practical, production-ready framework.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerability in Google Cloud's Vertex AI Exposes Sensitive Data to Attackers Researchers from Palo Alto Networks have identified a significant vulnerability in Google Cloud's Vertex AI platform, which allows attackers to exploit default permissions of AI agents. This vulnerability enables attackers to turn deployed AI agents into 'double agents' capable of exfiltrating sensitive data and compromising cloud infrastructure. The excessive default permissions associated with the Per-Project, Per-Product Service Agent (P4SA) pose a critical risk, as attackers can gain unauthorized access to sensitive areas of a customer's cloud environment. The findings prompted Google to update its documentation and recommend that organizations implement least-privilege access by replacing default service accounts with custom ones. The vulnerability highlights the need for better identity management and permission settings in AI deployments. As organizations increasingly rely on AI for operational workflows, the risk of such vulnerabilities becoming exploited grows. The situation remains urgent as organizations are advised to reassess their configurations to mitigate potential attacks. 7 sources 71

Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts

The full story

Extracted Entities

Platforms (1)

Tools (1)