#VulnerabilityReporting

Google Cloud Document AI flaw (still) allows data theft, despite bounty payout

by

September 17, 2024 at 04:24PM Google Cloud’s Document AI service has a vulnerability that could be exploited by attackers to access and steal sensitive data from Cloud Storage buckets. Despite being reported, Google has yet to fully address the issue, leaving the attack vector open. The nature of the vulnerability and back-and-forth with Google regarding … Read more

Google Announces Bug Bounty Program and Other Initiatives to Secure AI

by

October 26, 2023 at 10:39AM Google has announced several initiatives to enhance the safety and security of AI. This includes a bug bounty program to reward researchers for identifying vulnerabilities in generative AI, a Secure AI Framework (SAIF) to protect critical components of machine learning, and a $10 million AI Safety Fund in collaboration with … Read more