Skip to content
Threat Feed
Subscribe

Product

Zeek

3 briefs RSS
high advisory

Detection of Automated SQL Injection Patterns in Web Server Traffic

Attackers are utilizing automated SQL injection payloads to perform reconnaissance and exploit web applications, leveraging diverse techniques such as boolean-blind, time-based, and stacked query attacks.

nginx +5
1r 2t
high advisory

Web Server Potential SQL Injection Attempt Detection

This brief details the detection of potential SQL injection (SQLi) attempts against web servers by identifying common SQLi patterns in URLs and query strings, used by threat actors for reconnaissance, data exfiltration, or command execution, aiming for sensitive information disclosure or system compromise.

Apache +5 sql-injection web-attack reconnaissance initial-access data-exfiltration command-execution persistence cross-platform
1r 6t
medium advisory

Web Server Cloud Metadata SSRF Exploitation

Attackers are actively exploiting Server-Side Request Forgery (SSRF) vulnerabilities in public-facing web applications to access cloud instance metadata services, such as those on AWS, GCP, and Azure, to harvest temporary credentials and sensitive instance details.

AWS +8 ssrf cloud-security web-exploitation credential-access initial-access webserver
1r 2t 7i