Attributed metadata history

Up to 100 retained publisher events per page for 9c5db7e69eb5d635d7a896f67df184c83092bf25f17f174302899336edacd9b9. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:04 UTC

Amazon SNS' signature validation in the official SDK relied on a weak regex for default AWS certificate locations, that would incorrectly match an S3 bucket named `sns`. This bucket happened to be publicly readable and writeable, allowing an attacker to forge messages to any user of the official SDK SNS validator.

Fingerprint: 40790c42f144b9886ef135553f32527676755f3f0c5dd75418060471071b2d56

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

available

Fingerprint: 46fd50ac705e064c7517d97d61b5ec511c9b1ada6209622159dd39573ba08e5c