Cloud security firm Wiz says an intruder spent nearly two weeks in October roaming through AWS accounts tied to customers of Qubole, a data-lake service now owned by Idera, walking off with stored secrets and other data. The attacker got in using credentials for the AWS account that Qubole's own platform relies on to reach those customer environments, and it remains unclear how those credentials were obtained. The episode underscores how a trusted third-party integration can become an attacker's shortcut into otherwise well-guarded cloud accounts.
// source: thehackernews.com ↗