GCP Firewall Rule Opened To The World

Google SecOps@GoogleSecOps

•updated Feb 27, 2025•2•0•75

This rule detects when a new Google Cloud Platform (GCP) firewall rule is created that allows traffic from any source IP address (0.0.0.0/0) on all protocols. This configuration significantly broadens the attack surface and could indicate a misconfiguration or malicious activity aimed at bypassing network defenses.