New SSRF Exploitation Surge Serves as a Reminder of 2019 Capital One Breach
Summary: GreyNoise observed a sharp increase in Server-Side Request Forgery exploitation on March 9 across multiple SSRF vulnerabilities, preceded by Grafana path traversal attempts that may have served as a foothold for deeper exploitation. GreyNoise said the timing suggests a multi-phase strategy in which attackers map exposed infrastructure before escalating, though a direct link between the events remains unconfirmed.
Why it matters: GreyNoise tied the surge to the 2019 Capital One breach, a reminder that a single SSRF flaw has already exposed data on roughly 100 million customers - and it named ten countries with the greatest exploitation activity over the past six months, with only two targeted in the past 24 hours.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026