The Hacker News دوشنبه ۱۸ آبان ۱۴۰۵ · ۲۱:۲۱

Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that Qubole's platform uses to reach those customers. How the attacker got those credentials has not been disclosed. Qubole, a data lake platform owned by Idera,

Data Breach Cloud Security Cloud Computing

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

The Hacker News دوشنبه ۱۸ آبان ۱۴۰۵ · ۲۱:۰۶

Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. Both releases download and run code built to steal the wallet key that Swarm Desktop keeps for its node, along with the stored password that unlocks it. The code is also built to install a backdoor

Malware & Threats

Source

CERT/CC Vulnerability Notes دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۹:۵۱

VU#188754: FrodoBots EarthRover Mini+ firmware contains multiple vulnerabilities

Overview Multiple vulnerabilities in the FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) may allow remote code execution, unauthorized access to onboard sensors, disclosure of sensitive information, and full compromise of affected devices. Exploitation may enable an attacker to remotely control the rover, access audiovisual streams, or pivot into the user’s network. Description The FrodoBots EarthRo…

Vulnerabilities & Zero-Day IoT & OT Security Web Development

Source

eSecurityPlanet دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۹:۴۷

Philippine Tax Agency Faces 10 Million-Record Leak Claim: What We Know

Hackers claim to have stolen 10 million taxpayer records from the Philippine tax agency. Authorities are investigating the alleged breach and possible exposure.

Data Breach

Source

BleepingComputer دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۹:۴۲

Binance denies data breach after alleged ShinyHunters claims

Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum. [...]

Data Breach Threat Intelligence

Source