Sentra

Stolen Qubole credentials let attacker access dozens of customers' cloud data

Security firm Sentra identified a supply-chain attack in which an attacker obtained credentials belonging to big-data platform Qubole and used the cross-account access that customer companies had granted to Qubole to pull data from more than a dozen organizations. Sentra reported the campaign to Wiz, which investigated alongside Sentra and Mandiant and has since published full research findings; the attacker reportedly moved between compromised accounts in roughly a second each.