Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)

The report describes widespread scanning activity attempting to access cloud instance metadata (169.254.169.254) via SSRF-style requests to retrieve IAM credentials, cites the Capital One breach as an example of impact, notes an observed GET request pattern targeting the metadata IAM credentials path, and reminds readers that IMDSv2 mitigations make simple GET-based SSRF access less likely.