Home / Nov 10, 2026 / Story
0
#6 The Hacker News general November 09, 2026 at 17:51 UTC

Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

By [email protected] (The Hacker News)

AI Summary

An attacker leveraged credentials for Qubole's platform AWS account to breach multiple Qubole customer AWS environments between October 14–26, exfiltrating stored secrets and data, according to Wiz. Qubole, a data lake platform owned by Idera, has not disclosed how the platform credentials were initially compromised. This illustrates the third-party trusted-access risk in cloud environments where SaaS vendors hold cross-account IAM permissions.

Relevance score: 83.0/100

# More from November 10