Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
AWS Fixes Critical Loom and SageMaker Flaws Enabling Code Execution and Credential Theft
Excerpt
AWS has released fixes for four security vulnerabilities affecting its open-source Loom AI agent orchestration platform and Amazon SageMaker Unified Studio. The issues could enable authentication bypass, OAuth2 token theft, cloud credential exposure, internal network access, and arbitrary code execution in affected environments. The advisories, published on October 2, 2026, cover three Loom for AWS vulnerabilities tracked as CVE-2026-103956, CVE-2026-103957, and…
Read the original report →Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-103958 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-103957 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-103956 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-104019 | Medium | Score 54/100 | First seen |
IOC Relationship Graph
Building graph…