Cloud Run is a technology platform tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed December 4, 2025; most recent activity July 16, 2026.
Cloud Run is Google Cloud's fully managed, serverless platform for deploying and running stateless containers. It abstracts infrastructure and scales automatically with demand, making its security posture closely tied to container images, runtimes, and access controls—thus vulnerabilities in those layers can impact Cloud Run workloads.
Google's Mandiant has issued a warning about exposed serverless cloud functions, which are increasingly targeted by attackers due to their lack of authentication. These vulnerabilities allow access to sensitive…
Researcher Justin O'Leary discovered a significant vulnerability in Google Cloud's Kubernetes operator, allowing users to bypass Identity and Access Management (IAM) controls. Initially rated as high priority, Google…
A maximum-severity vulnerability in the React JavaScript library, tracked as CVE-2025-55182, allows unauthenticated remote code execution on affected instances. Security researchers report that 39 percent of cloud…