News
cybersecurity Hackers exploit SSHole OpenSSH flaw to breach Linux systems - BleepingComputer cybersecurity NIST: Solo Shouldn't Mean Less Secure - Dark Reading cybersecurity Weekly Cybersecurity Newsletter — Top 50 Cybersecurity Stories of the Week - CyberPress threat-intel Trusted by Default: Qubole Cross-Account Access Abused in the Wild - Wiz Research vulnerability VU#385711: PrestaShop Performance Debug Configuration Contains a PHP Code Injection Vulnerability - CERT/CC Vulnerability Notes vulnerability watchTowr Recognized as a Sample Vendor in Gartner® Emerging Tech — Agentic Security: Preemptive Exposure Management Demands AI-Driven Validation and Autonomous Interdiction - watchTowr Intelligence cybersecurity FBI agent stole $2.5 million in crypto from hackers under investigation - BleepingComputer cybersecurity Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia - The Hacker News cybersecurity Revolve Puts Data Breach Victim Count at 1.5 Million - SecurityWeek vulnerability USN-9008-1: libnfs vulnerability - Ubuntu Security Notices cybersecurity ⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More - The Hacker News ai The Download: empty AI climate claims, and an Nvidia investigation - MIT Technology Review cybersecurity Plex2Shell Exploited Against QNAP NAS Users - SecurityWeek threat-intel New Abe Office Malware Tricks Chrome Into Decrypting Its Own Protected Browser Cookies - GBHackers ai Innovating with AI in the special chemicals industry - MIT Technology Review
1 / 15
All news ›
Threat Intel

Trusted by Default: Qubole Cross-Account Access Abused in the Wild

Wiz Research ·

A threat actor used IAM credentials from Qubole's AWS account to assume integration roles in customer AWS environments. Here's what we observed and how to hunt for it.

Continue on Wiz Research ↗ ‹ All news Get the newsletter

The summary and image come from Wiz Research; the image is shown from their website.