Hackers Exploit Qubole’s Trusted AWS Access to Breach Customer Accounts and Steal Data

An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today.

The attacker used credentials for an AWS account that Qubole’s platform uses to reach those customers. How the attacker got those credentials has not been disclosed.

Qubole, a data lake platform owned by Idera,

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts

Hackers Exploit Qubole’s Trusted AWS Access to Breach Customer Accounts and Steal Data

About Author

AndyC

What do you feel about this?

CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

Hackers Compromise Ethersphere’s bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia

⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure

DHS Has Used This Controversial Investigative Tool 185,000 Times Since Trump Took Office

The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call

Free Chinese AI Models Are Getting Scary Good at Hacking

6 Best VPN Services (2026), Tested and Reviewed

SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware

Donate Bitcoin to this address

Donate Ethereum to this address

FTC Announces Inquiry into Personalized Pricing and Employee Compensation

CalPrivacy to Hold November Board Meeting on Privacy Rights and Regulatory Proposals

California Law Extends CMIA Protections to Health Care Chatbots and Enacts New Guardrails on AI Use in Clinical Care

Firewalling the AI Era: Why the Network Still Decides

PHP2Shell: How Cisco Helps Customers Respond to AI-Accelerated Threats

About Author

What do you feel about this?

More Stories

Donate Bitcoin to this address

Donate Ethereum to this address

You may have missed