TAG YOUR WAY IN: NEW PRIVILEGE ESCALATION TECHNIQUE IN GCP

Summary from the TLDR InfoSec newsletter

A new privilege escalation technique in Google Cloud Platform (GCP) exploits IAM Conditions and tagBindings to elevate access for attackers with low-risk roles. By attaching specific tags to resources, attackers can bypass restrictions and gain elevated privileges without directly modifying IAM policies. Organizations should prioritize securing tag permissions to prevent this overlooked escalation path in GCP.