Skip to content
Threat Feed
Subscribe

Vendor

Qubole

1 brief RSS
high advisory

Qubole: Unauthorized cross-account IAM role assumption

A threat actor leveraged compromised IAM credentials from a Qubole AWS account to assume customer integration roles, facilitating wide-scale resource discovery, credential harvesting, and S3 data exfiltration.

AWS +1 supply-chain-attack cloud-security credential-harvesting
5t 5i