Security · High impactFan score 47 · Tier B
Over a Dozen Organizations Hit in Qubole Supply Chain Attack
SecurityWeek · By Ionut Arghire ·
The Brief
- Attackers used compromised Qubole IAM credentials to access customer environments.
- Stolen data reportedly includes customer files, secrets, keys, environment variables and credentials.
- Over a dozen organizations were reportedly hit by the supply chain attack.
Why it matters
Developers using Qubole may have had secrets, keys and credentials exposed through a trusted third-party platform, so any exposed credentials should be treated as compromised.
Who’s affected
- Qubole customers
- Teams storing secrets or cloud credentials in Qubole environments
What to do
- Rotate any secrets, keys, credentials and environment variables that were accessible through Qubole.
- Review Qubole-related IAM and cloud access logs for suspicious activity.
Hackers used compromised Qubole IAM credentials to steal customer files, secrets, keys, environment variables, and credentials. The post Over a Dozen Organizations Hit in Qubole Supply Chain Attack appeared first on SecurityWeek .
Timeline
SecurityWeek reports over a dozen organizations hit in the Qubole supply chain attack
SecurityWeek
Over a Dozen Organizations Hit in Qubole Supply Chain Attack