News for hackers. Stuff that matters.

A comment on Capital One Says Breach Hit 100M Individuals in U.S. Parent comment

Re:Capital One Says Breach Hit 100M Individuals in U.S by pmredux on Wednesday July 31, 2019 @02:21AM (#20572092)
Might have been an SSRF exploit if the WAF was accepting parameter values that were then used to expose IAM credentials via the EC2 metadata service. See https://ejj.io/blog/capital-one for a good write-up.
[ Parent | on HN ]

There are no comments on this comment yet.