Product
medium
advisory
Cloud Credential Search in Containers Detected
1 rule 2 TTPsAn attacker using system search utilities like `grep` or `find` within a containerized environment to locate cloud credentials (AWS, Azure, GCP) indicates an attempt to gain unauthorized access to sensitive cloud resources or perform a container breakout to compromise the underlying cloud infrastructure.
Amazon Web Services +2
container
credential-access
discovery
cloud
linux
1r
2t
medium
advisory
Web Server Cloud Metadata SSRF Exploitation
1 rule 2 TTPs 7 IOCsAttackers are actively exploiting Server-Side Request Forgery (SSRF) vulnerabilities in public-facing web applications to access cloud instance metadata services, such as those on AWS, GCP, and Azure, to harvest temporary credentials and sensitive instance details.
AWS +8
ssrf
cloud-security
web-exploitation
credential-access
initial-access
webserver
1r
2t
7i
high
advisory
Google Security Updates — July 2026
5 CVEs 41 IOCsRoundup of Google security advisories published in July 2026.
golang.org/x/crypto/ssh +74
roundup
5c
41i
updated