Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

Software Supply Chain Security
Agentic AI Security
Antitrust remedies
Vulnerability Disclosure
Detection Engineering
Open-Weight Model Releases
Prompt injection
End-to-End Driving Models
Publisher Monetization
AI Cost Governance

How this is made

Today For You My Stack Off Radar Search

other

AWS Instance Metadata Service v2

Cloud metadata endpoint Pillar reached in its tests, using a PUT with a TTL header for a session token followed by a credential request.

Known aliases

IMDSv2

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 distinct publisher

Pillar chains a 9.1 SSRF to self-minted session IDs in Grafana's MCP server

Grafana's MCP server checked that a session ID looked like one instead of checking that it had issued it. Paired with a CVSS 9.1 SSRF in the same server, that gave unauthenticated callers a proxy inside the network.

Publishers:scworld.com

Reality

Evidence60
Adoption: Insufficient
Hype gap+12
Incentives70

Confidence

AWS Instance Metadata Service v2 — other — Clarity Today