Exposed Serverless Functions Present New Cybersecurity Risks

• •Exposed serverless functions are increasingly targeted due to lack of authentication.
• •Attackers exploit command injection and file inclusion vulnerabilities to gain access.
• •Mandiant recommends enhanced security measures, including code reviews and isolation of AI workflows.

Google's Mandiant has issued a warning about exposed serverless cloud functions, which are increasingly targeted by attackers due to their lack of authentication. These vulnerabilities allow access to sensitive information and can lead to broader cloud environment compromises. The rise of generative AI workflows, which often utilize these serverless functions, has exacerbated the issue. Attackers exploit vulnerabilities such as command injection and file inclusion to gain initial access. Once inside, they can escalate privileges and exfiltrate sensitive credentials. Mandiant recommends implementing security measures like code reviews and least-privilege access management to mitigate these risks. Organizations are urged to isolate AI experimentation and restrict public-facing services to enhance security. The current landscape indicates a significant rise in such attacks, necessitating immediate action from affected organizations.