Stale cloud trust opens customer data to supply-chain theft
Daily Cyber News: Stale cloud trust opens customer data to supply-chain theft
Customer data was stolen after attackers used compromised credentials linked to Qubole’s AWS account to assume trusted roles in other organizations’ cloud environments. The campaign affected over a dozen organizations and ran from October 14th to October 26th. Attackers enumerated resources, collected secrets and configurations, and exfiltrated data from S3 buckets.
Key context: Cross-account roles are normal for cloud services, but they can preserve powerful access after a business relationship ends.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, Stale, cloud, trust, opens, customer, data, supply-chain.
