IMDS Abused: Hunting Rare Behaviors to Uncover Exploits
wiz.io | blog | #zero-day | #cloud-security | #threat-detection | #credential-theft | #imds | #wiz-research
Summary
Wiz shares how hunting anomalous IMDS usage — the metadata service attackers abuse for credentials — uncovered a zero-day being exploited in the wild in a popular web service.
- Published
- Collected
--- id: 6971 title: "IMDS Abused: Hunting Rare Behaviors to Uncover Exploits" source_domain: wiz.io source_url: "https://www.wiz.io/blog/imds-anomaly-hunting-zero-day" published_at: "2025-09-22T14:50:13Z" tags: ["zero-day", "cloud-security", "threat-detection", "credential-theft", "imds", "wiz-research"] phying_url: "https://phying.com/item/6971" lang: en --- # IMDS Abused: Hunting Rare Behaviors to Uncover Exploits ## Summary Wiz shares how hunting anomalous IMDS usage — the metadata service attackers abuse for credentials — uncovered a zero-day being exploited in the wild in a popular web service. ## Intelligence Metadata - **Sources:** wiz.io - **Published:** 2025-09-22T14:50:13Z - **Original:** https://www.wiz.io/blog/imds-anomaly-hunting-zero-day - **Phying News:** https://phying.com/item/6971