Trusted cloud access exposes multiple AWS environments and data

Daily Cyber News: Trusted cloud access exposes multiple AWS environments and data

Multiple AWS environments had secrets and data accessed after a threat actor used credentials from an account associated with Qubole. Between October 14th and October 26th, the attacker assumed customer roles that still trusted the vendor account. Some of those roles had little or no recent legitimate use.

Key context: The incident turned a routine integration into a cloud supply-chain risk.

Additional detail: Organizations should audit external AWS trust relationships, remove unused roles, revoke suspicious sessions, and rotate every secret those sessions could read.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, Trusted, cloud, access, exposes, multiple, environments, data.