Most Google Cloud Attacks Start With Bug Exploitation

The report outlines Google Cloud and industry findings that exploitation of user-managed cloud software and software vulnerabilities (about 44% of initial access in Google Cloud) now surpasses credential abuse as the primary initial-access vector; it warns that AI-driven vulnerability analysis and exploit development have compressed response windows and urges organizations to adopt rapid patching, automated posture enforcement, and identity-centric controls.