I want to report a Google Cloud customer running insecure software that could potentially lead to compromise

If you have discovered an instance of a customer-managed service hosted on Google Cloud that is not currently abusive, but has a security vulnerability that might lead to compromise and abuse, you can report it here or by email at google-cloud-compliance@google.com.

Further resources:

For information on protecting yourself and your personal information, please visit our Safety Center for tips on staying safe online.
To find answers to many common questions and concerns about privacy and user data related to any Google product or service, please visit our Privacy Help Center.