Cyber CrimeNewQubole's AWS trust model turned against users
Wiz says an attacker used Qubole's own AWS account to assume customer roles between October 14 and October 26, harvesting secrets and S3 data.
> Search
2 results for “qubole”
2 results for “qubole”
Cyber CrimeNewWiz says an attacker used Qubole's own AWS account to assume customer roles between October 14 and October 26, harvesting secrets and S3 data.
Cyber CrimeNewWiz says attackers pivoted through Qubole's cross-account IAM roles to raid customer AWS secrets, even where the platform was already retired.