Back to cases

Live public case

Attempted exploitation

Last activity Sep 9, 3:52:06 PM PDT

highPending

Evidence-grounded assessment

Pending

Broad unauthenticated route and HTTP method enumeration observed

Protected workloads
One protected workload
Progression
Within-workload activity
Severity basis
Maximum incident posture

Observed impact

    Recommended actions

      Attack timeline

      2 incident threads

      Live progression remains visible; PII, native endpoints, hashes, and private identities do not.

      1. 1
        Attempted exploitationopen

        Broad unauthenticated route and HTTP method enumeration observed

      2. 2
        Attempted exploitationopen

        Broad unauthenticated route and HTTP method enumeration observed

      Relationship reasoning

      Same source cluster86%

      same privacy-preserving traffic source cluster and target within a bounded time window