#mandiant

Google Cloud's Mandiant team published a hardening guide for teams shipping public serverless functions that carry no authentication. Its recommendations put a load balancer, per-function IAM, and pipeline-side security scanning between the internet and your code.

Mandiant says attackers used CVE-2026-20245 to plant a rogue root account on Cisco SD-WAN devices.