Document AI, a Google Cloud service for file processing, had a worrying security flaw which allowed threat actors to steal sensitive data from people’s cloud storage accounts, and possibly even smuggle malware inside.
This is according to a new report from cybersecurity researchers Vectra AI, who found and reported the flaw to Google in early April. It was fixed in early September this year.
