Attackers used Qubole AWS credentials to raid customer clouds
From October 14 to 26 the actor assumed trusted roles, harvested secrets and downloaded S3 data from dozens of victims.
76
Product
AWS Secrets Manager
- Mentions · 7d1
- Mentions · 30d3
- All mentions9
- First seenSep 22, 2026
- Last mentioned1d ago
Timeline
9 articles · newest firstGheist harvests secrets through malicious GitHub Actions workflows
Wiz tracked more than 13,500 malicious branches on over 850 accounts since September 15, including private enterprise repositories.
76
AI Agent Workflows Could Expose Credentials Through Trusted Developer Tools
Trellix warns AI agent workflows can leak credentials from vaults into commands, logs, and model context.
52
AWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single Prompt
Zenity showed one prompt could steal Bedrock AgentCore credentials and reach other agents in the account.
75
One Prompt Could Hijack AWS AI Agents and Steal Cloud Credentials
Zenity's AgentCorruption chain let one prompt expose Bedrock AgentCore chats, memories, and cloud secrets.
73
AWS AgentCore security undone by prompt requesting credentials
Zenity Labs showed one prompt could steal AWS AgentCore IMDS credentials and hijack regional agents.
76
12 Best Secrets Management Tools Compared (2026): Features & Pricing
A 2026 roundup compares 12 secrets-management tools, ranking HashiCorp Vault, cloud vaults, Akeyless, and ephemeral-access brokers.
22
Top 10 Best Secrets Management Tools in 2026 [Ranked & Scored]
A 2026 industry report ranked HashiCorp Vault as the top secrets management tool, emphasizing dynamic credentials and cloud-native integrations.
30
Context Bombs Trick Autonomous Qwen AI Agents Into Stopping Cyberattacks
Tracebit context bombs used indirect prompt injection to stop Qwen3.8-27B agents in simulated cloud attacks.
55
Appears with
- Amazon Web Servicesvendor · 4
- Amazon Bedrock AgentCoreproduct · 3
- Microsoftvendor · 3
- Firecrackerproduct · 3
- Azure Key Vaultproduct · 3
- Amazon Elastic Container Registryproduct · 3
- Google Secret Managerproduct · 2
- AWSvendor · 2
- Googlevendor · 2
- 1Passwordvendor · 2
- HashiCorpvendor · 2
- Zenity Labsorganization · 2
- Keepervendor · 2
- Wizorganization · 2
- HashiCorp Vaultproduct · 2
- Amazon Web Servicesorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.