#gcp

From pentestpartners.com

Terraform Cloud token abuse turns speculative plan into remote code execution | Pen Test Partners

1 1

Speculative plan can run code on runners and expose cloud credentials. Learn how tokens are abused and how to lock it down with policy and dynamic creds.

#aws #gcp #redteam #devsecops #terraform #cloudsecurity #cybersecurity

1h ago