Attackers backdoor trusted AWS integrations to steal secrets
Wiz researchers uncovered the secret-stealing supply-chain attack
This page shows only the headline and the short summary. The full text is published by the original source.
Related news
Full archive →
CyberInsider
Remus Stealer advertises Gmail access that survives password changes
The operators of Remus Stealer are advertising a new feature that lets criminals read victims’ Gmail inboxes directly from the malware’s control panel, including messages containing verification codes and account recovery links. The developer claims this access survives password changes and session revocation. However, an investigation by Hudson Rock has yet to confirm that claim … The post Remus Stealer advertises G…
AWS Security Bulletins
CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI
Bulletin ID: 2026-174-AWS Publication Date: 11/09/2026 13:00 PM PST Description: AWS ParallelCluster CLI is an open source command line tool, distributed on PyPI as aws-parallelcluster. We identified CVE-2026-124033, an issue where the export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a relative path traversal issue. An authenticated remote user with write…
The Hacker News
Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that Qubole's platform uses to reach those customers. How the attacker got those credentials has not been disclosed. Qubole, a data lake platform owned by Idera,
BleepingComputer
Russian cloud firm Beget rebuilds from scratch after data wiper attack
A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said. [...]