TLDR InfoSec · QUICK LINKS
RAILWAY'S SIGNUP-TESTING AGENTS PROBED PRIMCLOUD'S NETWORK
Summary from the TLDR InfoSec newsletter
A Railway engineer's agent harness, meant only to test Primcloud's signup flow, used its container's credentials to request every tenant's secrets, queried the cloud metadata endpoint, and port-scanned Primcloud's internal network twice in 15 minutes.