Attributed metadata history
Up to 100 retained publisher events per page for 8872c908cdb513bb7901735c78f83434f9d7481541720c35f0478b9f62f6e58b. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_d11443da85ea659d49
observed · 2026-10-12 15:37:03 UTC
available
Fingerprint: 46fd50ac705e064c7517d97d61b5ec511c9b1ada6209622159dd39573ba08e5c
intelligence_src_d11443da85ea659d49
observed · 2026-10-12 15:37:03 UTC
An attacker with sufficient privileges in AWS to modify the route table and some other EC2 privileges, could pretend to be a metadata server and provide an attacker controlled bootup script to EC2s to move laterally.
Fingerprint: 35b613194992e060fd3d825c98091996b8ad93853631e108cf96a136ac9bf25b