Many successful attacks of the GCPs are due to poor hygiene and a lack of basic control implementation.
Time was of the essence in the compromise of the Google Cloud instances.
In 40% of instances, the time to compromise was under eight hours.
source: www.techworm.net