← Back to the boardNews
Qubole supply chain attack exposed AWS, Entra ID, and Okta credentials
Why it’s here: A supply-chain cyber campaign compromising AWS, Entra ID and Okta credentials across dozens of customers is a cybersecurity threat-research item that bears on third-party access and federal critical-infrastructure security policy, though it has no explicit government hook.
Trace across the boardItem
5d agoCSO Online · research by WizQubole supply chain attack exposed AWS, Entra ID, and Okta credentialsAn attacker used Qubole's compromised AWS IAM credentials to assume customer cross-account roles, exfiltrating data and harvesting AWS, Entra ID and Okta secrets across dozens of organizations in October 2026.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor8 linked
Connected
8 links- NewsTrusted by Default: Qubole Cross-Account Access Abused in the Wild | Wiz BlogBoth involve Mandiant, Wiz, Qubole
- NewsARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogBoth involve Okta, Wiz, Microsoft Entra ID
- NewsTowards a better cloud vulnerability response model | Wiz BlogBoth involve Wiz, Amazon Web Services
- NewsOperation Stormbreaker case study | WizBoth involve Wiz, Amazon Web Services
- NewsThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz BlogBoth involve Wiz, Amazon Web Services
- NewsHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz BlogBoth involve Wiz, Amazon Web Services
- NewsA U.S. Navy Cloud Broker enhances cloud security with Wiz | WizBoth involve Wiz, Amazon Web Services
- NewsNew attack vectors emerge via recent EKS updates | Wiz BlogBoth involve Wiz, Amazon Web Services
About
- Mandiant
- Okta
- Wiz
- Microsoft Entra ID
- Amazon Web Services