Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

A human attacker was able to quickly exploit a vulnerability in Marimo, achieving remote code execution and then moving to an SSH bastion in a very short time frame. This swift action was observed by Sysdig, a cloud security company, which noted that the attacker was able to pivot from a vulnerable Marimo notebook to the SSH bastion. The speed of this movement highlights the rapid pace at which skilled human operators can act after gaining initial access to a system. The use of artificial intelligence is also contributing to the quickening pace of vulnerability exploitation. The entire process took only eight seconds, demonstrating the rapid capabilities of human attackers. This incident shows that human operators can be just as fast as automated attacks in exploiting vulnerabilities.