Qubole supply chain attack exposed AWS, Entra ID, and Okta credentials

An attacker has abused AWS cross-account IAM roles to access multiple customer environments, steal data, and harvest credentials in a supply-chain attack that ran between October 14 and October 26. Researchers from Wiz, working with Sentra and Mandiant, said they observed an attacker using IAM credentials for Qubole’s AWS account to assume roles in customer environments. The compromised credentials allowed the attack…

This page shows only the headline and the short summary. The full text is published by the original source.