Researchers have identified two five-alarm security issues in a popular Google data service, either of which could allow attackers access to sensitive secrets useful for rampant lateral movement.