Hackers target SSRF bugs in EC2-hosted sites to steal AWS credentials A targeted campaign exploited Server-Side Request Forgery (SSRF) vulnerabilities in websites hosted on AWS EC2 instances to extract EC2 Metadata, which could include Identity and Access Management (IA...

Make sure your #AWS #EC2 instances don't have #IMDSv1 enabled!

#cloud
#cybersecurity
#hacking
#SSRF

Understanding AWS Instance Metadata Service Introduction In AWS, roles have become an essential part of securely granting permissions...

✍️ New blog post by Alexander Hose

Understanding AWS Instance Metadata Service

#aws #awscli #imdsv1