Google Looker Studio Vulnerabilities Allow Attackers to Exfiltrate Data from Google Services

**Executive Summary:** Tenable Research disclosed “LeakyLooker,” nine critical cross-tenant vulnerabilities in Google Looker Studio that could allow attackers to bypass isolation, steal or modify data from services like BigQuery, Cloud Storage, and SQL databases via zero-click and one-click techniques (e.g., alias injection, sticky credential cloning, and covert SQL exfiltration); Google has patched the issues globally but organizations should audit report/viewer access and revoke unused data connector permissions.