Google Cloud Vertex AI Allows Attacker to Hijack Victim’s Model and Poison it

A newly disclosed vulnerability in Google Cloud Vertex AI could have allowed attackers to hijack machine learning model uploads and execute malicious code in victim environments, according to research shared with Google under responsible disclosure. The issue affects the Vertex AI Python SDK (google-cloud-aiplatform) and stems from a combination of predictable cloud storage bucket naming […] The post Google Cloud Vertex AI Allows Attacker to Hijack Victim’s Model and Poison it appeared first on Cyber Security News.