Tenable Vulnerabilities in Google Cloud Logging Expose Users to Attacks
Article Content
Browse articles 
Tenable Research has disclosed two vulnerabilities in Google Cloud Logging. The first, a Denial of Wallet (DoW) vulnerability, allows attackers to execute costly BigQuery queries on a victim's project through a malicious URL. The second vulnerability enables data exfiltration from BigQuery datasets under certain conditions, also via a crafted URL.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
Timeline
2026-02-13
Tenable discloses Denial of Wallet vulnerability in GCP Cloud Logging
2026-02-13
Tenable discloses data exfiltration vulnerability in GCP Cloud Logging
More articles in this cluster (1)
Following this threat?
Track Google Cloud Platform in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…