iam

Attacker Used Qubole's AWS Credentials to Assume Customer Integration Roles and Steal Data

Wiz says a threat actor spent two October weeks assuming customers' Qubole-integration IAM roles from Qubole's own AWS account, harvesting secrets and draining S3; runners should check CloudTrail back to October 1.