pmredux
Re:Capital One Says Breach Hit 100M Individuals in U.S
on Wednesday July 31, 2019 @02:21AM (#20572092)
Might have been an SSRF exploit if the WAF was accepting parameter values that were then used to expose IAM credentials via the EC2 metadata service. See https://ejj.io/blog/capital-one for a good write-up.