Attackers use Qubole AWS trust to steal customer secrets
Wiz says compromised Qubole IAM credentials let attackers AssumeRole into multiple customer AWS accounts starting October 14.
Stories per day · 30 days
3 RSS
4 stories, newest first · one card per story
Stories tagged #cloudtrail
AWS Automatically Quarantines Exposed IAM Keys Within 10 Seconds of GitHub Leak
AWS quarantined a leaked IAM key 10 seconds after Unit 42 published it to public GitHub.
Exploring the new AWS Sign Up experience
Wiz analyzed AWS's new sandboxed sign-up experience, finding it omits CloudTrail, blocks security services, and limits vendor IAM role access.
3
Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection
Unit 42 clusters behavior of 40,000+ AWS identities from 125 cloud environments to map functional roles and enable lightweight SQL-based detection.
3