Qubole AWS Credentials Exploited by Hackers to Compromise Customer Data

Hackers exploited Qubole's trusted AWS access to breach customer accounts between October 14 and 26, stealing stored secrets and data. The attack utilized credentials from Qubole's platform, though the method of credential compromise remains undisclosed, as reported by Wiz.

An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today.

The attacker used credentials for an AWS account that Qubole's platform uses to reach those customers. How the attacker got those credentials has not been disclosed.

Qubole, a data lake platform owned by Idera,

Read original article