google cloud’s vertex ai has a permission blind spot that lets attackers turn ai agents into double agents for stealing data and building backdoors.

researchers from palo alto networks unit 42 flagged how the default service agent permissions can get misused.

so a compromised or misconfigured agent looks normal while quietly exfiltrating s…