Skip to content
Hmmnm brand header logo displayed prominently across the top of the webpage
  • Home
  • Blog
  • About Us
  • Contact
  • Toggle website search
Press Escape to close the search panel.
Menu Close
  • Home
  • Blog
  • About Us
  • Contact
  • Toggle website search
Search this website

AWS

  1. Home>
  2. Blog>
  3. AWS
Read more about the article SSRF to Cloud Metadata: The Attack Behind Capital One and How to Stop It

SSRF to Cloud Metadata: The Attack Behind Capital One and How to Stop It

  • Post author:Prabhu Kalyan Samal
  • Post published: September 18, 2026
  • Post category:Security

How SSRF turns one forged request into cloud-wide credential theft — the Capital One chain, IMDSv2, and the controls that actually block it.

Continue ReadingSSRF to Cloud Metadata: The Attack Behind Capital One and How to Stop It
Read more about the article AWS us-east-1 Outage: When Multi-Region Wasn’t

AWS us-east-1 Outage: When Multi-Region Wasn’t

  • Post author:Prabhu Kalyan Samal
  • Post published: September 3, 2026
  • Post category:Cloud & Infrastructure/Security

A DYNOMITE autoscaler impairment cascaded through AWS’s busiest region and its own consoles. The dependency-concentration landmark.

Continue ReadingAWS us-east-1 Outage: When Multi-Region Wasn’t
Press Escape to close the search panel.

Categories

  • AI Security (1)
  • Aviation and Aerospace Security (9)
  • Beyond Security (2)
  • Security (368)
  • Technology (63)

Recent Posts

  • Build a Ransomware Sandbox with FLARE-VM and CAPE: Automated Config Extraction and IOC Dumping
  • Hunting Ransomware Pre-Encryption Behavior with Sysmon and Velociraptor: Shadow Copy Deletion, Batch Encryption, Ransom Notes
  • Weekly Threat Intel: LockBit Successor Shuffles, September 2026 Edge Device CVEs and Loader Chains
  • Weekly Threat Intel: Ransomware Affiliate Rotation, Autumn 2026 Exploitation and Infostealer Ops
  • Hunting Phishing Infrastructure with urlscan.io: Pivot from Screenshot to Campaign Takedown
  • Build a Docker Socket Escape Lab: Why Mounting /var/run/docker.sock Is a Root Kill Chain
  • Build an AiTM Phishing Lab with Evilginx: Understanding Session Cookie Theft and Detection
  • Wireshark + Scapy Lab: Replay and Dissect Aircraft ADS-B and ACARS Traffic
  • Build a PCAP Triage Lab with Zeek and T-Shark: Spot C2 Beacons in Real Traffic
  • Write YARA Rules That Catch Ransomware Families: A Detection Lab with yara-python
  • Agentic AI Security Cheat Sheet: Threat Models, MCP Hardening Checklist and Detection Hooks
  • Alert Fatigue Is a Design Problem: Building a Detection Engineering Lifecycle That Survives Contact
  • Write Sigma Rules That Actually Fire: A Detection-as-Code Lab with SigmaCLI and splunk-react
  • Why Planes Don’t Get Hacked — And Where the Next Aviation Cyber Risk Really Is
  • What Is Prompt Injection and How to Prevent It: A Complete Exam Prep Guide

Archives

  • October 2026 (19)
  • September 2026 (272)
  • August 2026 (98)

Newsletter

Get all latest content delivered to your email a few times a month. Updates and news about all categories will send to you.
Email is required Email is not valid
This field is required
Thanks for your subscription.
Failed to subscribe, please contact admin.
Hmmnm

Our Other Sites

  • Hmmnm.in
  • Odia.hmmnm.in

Quick Links

  • Security Services
  • Learning Paths
  • About Us
  • Contact
  • Blog
  • Privacy Policy
  • Disclaimer
  • Security Products
  • Terms of Service

Contact Info

  • 📧 contact@hmmnm.com
  • 🌐 hmmnm.com
in
© 2026 @Hmmnm

We use cookies to understand how the site is used and to improve your experience. You can accept analytics cookies or continue with essential cookies only. Privacy Policy

  • Home
  • Blog
  • Security
  • Experience
  • About Us
  • Services
  • Contact