The Global Leader in Cybersecurity Events & Trainings.
This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud providers' access controls.
July 27, 2026
Significant cracks in the managed identity trust chains of the world's biggest cloud platforms could put enterprise and government resources at risk.
That's according to Justin O'Leary, independent security researcher, who discovered two "confused deputy" vulnerabilities in both Microsoft Azure and the Google Cloud Platform (GCP) earlier this year. Despite reporting them to the cloud giants, neither company acknowledged the vulnerabilities or paid a bug-bounty reward, even though Microsoft appears to have silently patched its flaw.
