How can a predictable bucket name lead to 𝘁𝗵𝗿𝗲𝗲 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗰𝗿𝗼𝘀𝘀-𝘁𝗲𝗻𝗮𝗻𝘁 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗶𝗻 Google 𝗖𝗹𝗼𝘂𝗱, 𝗶𝗻𝗰𝗹𝘂𝗱𝗶𝗻𝗴 𝗮𝗻 𝗥𝗖𝗘?

​𝗞𝗶𝗰𝗸𝗶𝗻𝗴 𝘁𝗵𝗲 𝗕𝘂𝗰𝗸𝗲𝘁, my latest research for Focal Security, talks about exactly that.

Bucket Squatting is a deceptively simple attack…