News2026-11-11 14:23 UTC

Qubole cross‑account access abused in the wild

Threat actors used IAM credentials from Qubole’s AWS account (Oct 14‑26) to assume integration roles, enumerate resources, read secrets, and download S3 objects; separate actor used customer‑owned keys.

More News

11-11 14:23 UTCGoogle patches eighth Chrome zero‑day exploited in attacks
11-11 14:23 UTCHackers exploit critical Barracuda ESG flaws to gain root access
11-11 14:23 UTCN‑Able takes N‑Central cloud offline after researcher discloses 33 zero‑days
11-11 14:23 UTCTurla’s Cereal toolset turns Exchange servers into C2
11-11 14:16 UTCProject Faro Secures $270M to Launch Dollar Stablecoin

Qubole cross‑account access abused in the wild · Coin News Pot