← Back to the boardNews
Trusted by Default: Qubole Cross-Account Access Abused in the Wild | Wiz Blog
Why it’s here: A detailed threat-research report on a supply-chain cross-account access campaign against cloud integrations; it is cybersecurity threat research with implications for federal cyber policy and critical-infrastructure supply-chain security, though it lacks an explicit policy hook.
Trace across the boardItem
5h agoWiz Research · research by MandiantTrusted by Default: Qubole Cross-Account Access Abused in the Wild | Wiz BlogWiz reports a threat actor abused Qubole-linked AWS cross-account IAM roles in October 2026 to enumerate victim environments, harvest secrets, and exfiltrate S3 data.1 outletCyber1 linked
Connected
1 links- NewsQubole supply chain attack exposed AWS, Entra ID, and Okta credentialsBoth involve Mandiant, Wiz, Qubole
About
- Mandiant
- Wiz