2026 Critical Cloud Control Plane Detection: GCP Storage Bucket Public IAM Binding
Detects modifications to Google Cloud Storage bucket IAM policies that grant access to 'allUsers' or 'allAuthenticatedUsers'. This activity indicates a potential misconfiguration or an attempt by an attacker to stage or exfiltrate data by making bucket contents publicly accessible.
Cortex XDR
