@FocalSecurity
Account based inCyprus
About this account
- Account based in
- Cyprus
- Connected via
- Israel Android App
Account-level information from X, not a live location or the device used for a specific post.
Finding and disclosing 0-days in the cloud, protecting organizations in sensitive industries from nation state actors
Joined January 2026
- Tweets3
- Following2
- Followers46
- Likes1
Focal Security retweeted
I achieved a cross-tenant #RCE in #GoogleCloud simply by abusing predictable bucket names. ๐ชฃ
In my latest research for @FocalSecurity, I look into "Bucket Squatting" - a cross-tenant attack that landed me 3 critical vulnerabilities in GCP.
Here is how it works:
We found ๐๐ฎ๐๐ฒ๐๐ฎ๐๐ง๐ผ๐๐ฒ๐ฎ๐๐ฒ๐ป (๐๐ฉ๐-๐ฎ๐ฌ๐ฎ๐ฑ-๐ญ๐ฏ๐ฎ๐ต๐ฎ)โa critical cross-tenant flaw in Google Cloud's Apigeeโbut what if a malicious actor found it first?
Check out our article explaining how to preemptively mitigate such vulnerabilities:
focalsecurity.io/blog/mitigaโฆ
Check out our article showcasing how we found GatewayToHeaven (CVE-2025-13292), a cross-tenant vulnerability in GCP's Apigee:
focalsecurity.io/blog/gatewaโฆ