Research reveals Azure IMDS allows single-command subscription takeover
cyb3rops · x · 2026-08-31
A security researcher disclosed abuse of the Azure Instance Metadata Service (IMDS), showing that a single curl command on an exposed Azure VM can yield Managed Identity tokens, leading to full subscription compromise. The paper documents the entire kill chain, including resource enumeration, Key Vault draining, and rapid privilege escalation, highlighting common misconfigurations in RBAC and the blast radius of IMDS tokens.
More from Safety
- Untethered iOS 27.0.1 jailbreak demoed on iPhone 18 Pro at Hexacon — jedisct1 · 2026-10-16
- China requires MOFCOM approval to open-source models above 2T params or 10^26 FLOPS — zephyr_z9 · 2026-10-16
- Universal forgery attack breaks Chinese PQC signature Origami using only the public key — matthew_d_green · 2026-10-16
- 400+ researchers sign open letter: AI needs both alignment and containment — ghadfield · 2026-10-16
- Celebrity AI Deepfakes Rack Up Millions of Views as Verified Fan Accounts Spread Fakes — ChuckDBrooks · 2026-10-16
- New Yorker excerpt: Brockman kept asking 'how do we win?' when pitched 2017 AI safety coalition — ben_j_todd · 2026-10-16