TGViewer
CloudSec Wine CloudSec Wine @cloud_sec · 2.27K subscribers
Post #360 744
🔶 Old Services, New Tricks: Cloud Metadata Abuse by UNC2903

Mandiant identified exploitation of public-facing web applications by threat actors (UNC2903) to harvest credentials using Amazon's Instance Metadata Service (IMDS).

https://www.mandiant.com/resources/cloud-metadata-abuse-unc2903

#aws
  • 🔥 2
Open in Telegram All posts from @cloud_sec
More from @cloud_sec
  1. Oct 13, 2026👩‍💻 Azure's Weakest Link - Five Full Cross-Tenant Compromises Five critical Azure cross-…
  2. Oct 12, 2026🤖 The AI SDLC transformation playbook Atlassian's shared their own version of an AI SDLC…
  3. Oct 9, 2026⚠️ Discovering and exploiting a remote code execution vulnerability in OpenCode Datadog Se…
  4. Oct 8, 2026🤖 How DigitalOcean Manages Credentials for Autonomous Agents DigitalOcean Managed Agents…
  5. Oct 7, 2026👩‍💻 Storm-3168: Agentic-driven cloud attacks using compromised service principals Storm-…
  6. Oct 6, 2026🤖 Securing the software factory at machine speed GitLab's CISO argues that agentic AI dev…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →