Term Kind Topic What it is
Capital One 2019: From SSRF to the Metadata Endpoint IMDSv1 Breach case-study Identity & Access Management A server-side request forgery reached the cloud instance metadata service, obtained temporary credentials, and used an over-permissioned role to read a very large volume of data.
Equifax 2017: A Known Patch and an Expired Certificate Equifax Breach case-study Supply Chain Security An unpatched framework vulnerability provided entry, and an expired certificate on a monitoring device meant the exfiltration went undetected for months.