CybersecurityUpdated Yesterday

Compromised Qubole credentials let attackers into customer AWS environments

Qubole’s big-data platform used an AWS account to access customer environments. Attackers used compromised credentials for that account to get into multiple customers’ AWS environments. Wiz, as cited by The Hacker News, placed the activity between October 14 and 26; SecurityWeek reported that more than a dozen organizations were hit. The stolen material included customer data and files, plus secrets such as keys, environment variables, and credentials. The reports do not say how the attackers first obtained the Qubole credentials.

3 publishers3 reports

Coverage started November 9