Stolen Qubole credentials expose customer data across accounts
What happened
A Nov 10 report said attackers used stolen Qubole credentials to reach customer data through cross-account roles customers had granted the big-data platform. The headline says dozens of customers were breached; the body says data at more than ten organizations was accessed. Attackers switched a trusted role in about one second and read roughly 100 passwords and keys from three storage locations in seven minutes, with no write operations. Sentra found the attack within 24 hours and investigated with Wiz and Mandiant; Wiz has published full research.
Written by AI from the coverage · updated 2 days ago
Coverage
Follow the reports to see the story from different sides.
- Hacker News front pageSupply chain attack on Qubole customers
攻击者利用窃取的 Qubole 凭证，通过客户曾授予该大数据平台的跨账户角色访问了十余家组织的数据，约 1 秒即可切换一个受信任角色，7 分钟内从三处存储读取约 100 个密码和密钥，且全程 0 写入操作。Sentra 在 24 小时内发现该攻击并与 Wiz、Mandiant 联合调查，Wiz 已发布完整研究。
Heat over time
Heat now 3·Comparable peak 10（Nov 10 06:00）·Comparable change over 24 hours -50%
The trend only compares accounts observed without gaps, so its range may be smaller than the current heat. Hover or tap the chart for each hour; the left and right arrow keys step through it.