#6
The Hacker News
general
November 09, 2026 at 17:51 UTC
Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data
By [email protected] (The Hacker News)
AI Summary
An attacker leveraged credentials for Qubole's platform AWS account to breach multiple Qubole customer AWS environments between October 14–26, exfiltrating stored secrets and data, according to Wiz. Qubole, a data lake platform owned by Idera, has not disclosed how the platform credentials were initially compromised. This illustrates the third-party trusted-access risk in cloud environments where SaaS vendors hold cross-account IAM permissions.
Relevance score: 83.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →