As cited
Copy frozen at (site build).
vulnerabilities
New SSRF Exploitation Surge Serves as a Reminder of 2019 Capital One Breach
GreyNoise detected over 400 IP addresses exploiting Server-Side Request Forgery (SSRF) vulnerabilities across multiple platforms, with recent activity concentrated in Israel and the Netherlands. The surge recalls the 2019 Capital One breach, which leveraged SSRF weaknesses to compromise sensitive data. SSRF remains a practical attack vector for accessing internal resources and cloud metadata services.
Why it matters: Cloud and application operators must patch SSRF flaws and restrict outbound connections from application servers, as active exploitation campaigns show attackers are actively scanning for and exploiting these weaknesses in production environments today.
- Source published
- First seen by Cybersecurity Tracker