Back to cases

Live public case

Confirmed compromise

Last activity Aug 14, 11:44:05 AM PDT

criticalImpact confirmed

Evidence-grounded assessment

Not required

Exploit request received non-reflected process identity output

Protected workloads
One protected workload
Progression
Within-workload activity
Severity basis
Maximum incident posture

Observed impact

  • Remote command execution
  • Root execution
  • Server identity disclosure
  • Shell spawned
  • System discovery
  • System information disclosure
  • Workload discovery process spawned
  • Workload root shell

Recommended actions

    Attack timeline

    1 incident threads

    Live progression remains visible; PII, native endpoints, hashes, and private identities do not.

    1. 1
      Confirmed compromiseconfirmed

      Exploit request received non-reflected process identity output