Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Critical AWS Flaw Lets Attackers Bypass Port Forwarding Restrictions and Steal IAM Credentials
Excerpt
A critical vulnerability in the AWS Systems Manager (SSM) Agent could allow authorized attackers to bypass Session Manager port-forwarding restrictions, access link-local services, and steal temporary IAM credentials assigned to Amazon EC2 instances . Tracked as CVE-2026-89049, the issue affects AWS Systems Manager Agent versions earlier than 3.3.4851.0. GitHub Security Advisory GHSA-w9jw-h72g-6hxc3 classifies the flaw as critical, with a CVSS v3.1 score reflecting network…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-89049 | Medium | Score 54/100 | First seen |
IOC Relationship Graph
Building graph…