Back to cases

Live public case

Attempted exploitation

Last activity Sep 26, 1:49:35 PM PDT

highFailed

Evidence-grounded assessment

Failed

Broad unauthenticated route and HTTP method enumeration observed

Protected workloads
One protected workload
Progression
Within-workload activity
Severity basis
Maximum incident posture

Observed impact

    Recommended actions

      Attack timeline

      2 incident threads

      Live progression remains visible; PII, native endpoints, hashes, and private identities do not.

      1. 1
        Attempted exploitationopen

        Broad unauthenticated route and HTTP method enumeration observed

      2. 2
        Reconnaissanceopen

        Broad unauthenticated route and HTTP method enumeration observed

      Relationship reasoning

      Same source cluster86%

      same privacy-preserving traffic source cluster and target within a bounded time window