[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLhKXnxnWgdZnDznywIwSCbTV0WtWC0T8aOaMCmsuaRs":3},{"article":4,"iocs":38,"watch_terms":39,"solutions":40,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"10cd634c-578c-4882-9728-7f9a68835d64","'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure","confused-deputy-flaws-persist-in-google-cloud-microsoft-azure-c99133","This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud providers' access controls.","The article highlights ongoing 'Confused Deputy' vulnerabilities in major cloud platforms like Google Cloud and Microsoft Azure. These flaws enable attackers to gain administrative privileges and circumvent existing access control mechanisms, posing a significant security risk.","Confused Deputy flaws persist in Google Cloud and Microsoft Azure.","https:\u002F\u002Fwww.darkreading.com\u002Fcloud-security\u002Fconfused-deputy-flaws-google-cloud-microsoft-azure","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt858353272bfe1d66\u002F6a67aa58d69290224aaaac5a\u002Fconfusedeputy-sjharmon-Getty-174844180.jpg?width=720&quality=80&disable=upscale","2026-07-27T20:57:26+00:00","2026-07-27T22:00:23.371529+00:00",7,[17,20,22],{"name":18,"type":19},"Google","vendor",{"name":21,"type":19},"Microsoft",{"name":23,"type":24},"cloud computing","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":25,"icon":27,"name":28,"slug":29},null,"Vulnerabilities","vulnerabilities",[31,33],{"category":32},{"id":25,"icon":27,"name":28,"slug":29},{"category":34},{"id":35,"icon":27,"name":36,"slug":37},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[18,21],{"controls":41,"vendors":124},[42,70,98],{"slug":43,"name":44,"problem":45,"products":46},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[47,54,62],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":43,"product_name":51,"url":52,"description":53},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"slug":71,"name":72,"problem":73,"products":74},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[75,82,90],{"vendor_slug":76,"vendor_name":21,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"slug":99,"name":100,"problem":101,"products":102},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[103,108,116],{"vendor_slug":76,"vendor_name":21,"vendor_logo":77,"product_slug":104,"product_name":105,"url":106,"description":107},"defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",[125,130],{"slug":126,"name":18,"logo_path":127,"roles":128},"google","\u002Fvendor-logos\u002Fgoogle.png",[129],"affected",{"slug":76,"name":21,"logo_path":77,"roles":131},[129],{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":147},"confused-deputy-flaws-enable-privilege-escalation-in-google-cloud-and-azure","Confused Deputy Flaws Enable Privilege Escalation in Google Cloud and Azure","Confused Deputy vulnerabilities arise when a trusted service or component is manipulated into performing privileged actions on behalf of an attacker, bypassing intended access control boundaries. In cloud environments like Google Cloud and Microsoft Azure, these flaws are particularly dangerous because they can allow attackers to escalate to administrative privileges without directly compromising credentials. The persistence of these issues highlights a systemic challenge in cloud platform design, where implicit trust relationships between services create exploitable gaps. Organizations relying on cloud-native identity and access management (IAM) configurations may unknowingly expose themselves to lateral movement and full account takeover. This matters because even well-configured tenant environments can be compromised through platform-level architectural weaknesses outside the customer's direct control.",[137,138,139,140,141,142,143,144,145,146],"CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 18 – Penetration Testing","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-6 (Least Privilege)","NIST SP 800-53 IA-4 (Identifier Management)","NIST SP 800-53 SI-7 (Software, Firmware, and Information Integrity)","NIST CSF PR.AC-4 (Access Permissions and Authorizations)","MITRE ATT&CK T1548 (Abuse Elevation Control Mechanism)","GDPR Article 32 (Security of Processing)",{}]