Attackers used Qubole AWS credentials to raid customer clouds
From October 14 to 26 the actor assumed trusted roles, harvested secrets and downloaded S3 data from dozens of victims.
Stories per day · 30 days
8 RSS
Relatedaws9qubole7cloud4s34credential-theft3supply-chain3secrets-manager2agentic-attacks1agentic-identities1ai-governance1amazon-cognito1artex1assume-role1cloud-billing1cloud-breach1cloud-identity1cloudtrail1entra-id1
57 stories, newest first · one card per story
Stories tagged #iam
Datadog reports in-the-wild ARTEX agentic attacks on AWS environments
Operators used stolen IAM keys and public Cognito pools to hunt financial data, secrets, and account details.
Governing Agentic Identities in the Enterprise
AI agents inherit human privileges and face prompt-injection risks as enterprise proxies, per GTIG agent-based intrusions.
Phishing campaign uses stolen GCP access to bill victims for LLMs
Attackers phished MFA codes, linked foreign projects to victim billing, and kept Gemini prompts hidden from the organization.
2
Datadog Security Labs releases pathrunner AWS privilege escalation framework
The modular console automates more than 80 modules that take one AWS identity's credentials and obtain another's.
No Identity, No Recovery: Cyber Resilience Starts With IAM
Analyst says identity resilience is essential to recover operations after ransomware and outages.
AWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single Prompt
Zenity showed one prompt could steal Bedrock AgentCore credentials and reach other agents in the account.
AWS AgentCore security undone by prompt requesting credentials
Zenity Labs showed one prompt could steal AWS AgentCore IMDS credentials and hijack regional agents.
The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
SailPoint says most firms still govern AI agents with human-speed identity controls.
3
[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)
Disclosure: RCDevs WebADM 2.4.14 log viewer command injection yields code execution as uid 999.
11 Best Cloud Directory Services Compared (2026): Features & Pricing
A 2026 buyer's guide ranks Microsoft Entra ID the top cloud directory, ahead of JumpCloud and Okta Universal Directory.
2
Cybersecurity jobs available right now: October 6, 2026
Help Net Security lists October 6 cybersecurity job openings at NSA, Synopsys, BMO, and other employers.
Danish university DTU breach exposes data of up to 200,000 people
Technical University of Denmark says hackers stole IAM data that may expose up to 200,000 current and former users.
1
12 Best IGA Tools Compared (2026): Features & Pricing
A 2026 buyer's guide ranks SailPoint the top identity governance platform, with Saviynt and Entra ID Governance close behind.
12 Best IAM Solutions Compared (2026): Features & Pricing
A 2026 buyer's guide ranks 12 IAM products, favoring Entra ID and Okta for workforce identity.
OpenID Foundation: Identity Management for Agentic AI [pdf] (2025)
OpenID Foundation white paper addresses identity management for agentic AI systems.
12 Best IGA Tools in 2026: The Ranked Buyer’s Guide
A 2026 buyer's guide ranks 12 IGA platforms, naming SailPoint best for large enterprise programs.
IAM for AI agents: A Practical Enterprise Framework
Guide proposes an IAM framework for AI agents, treating each agent as a governed non-human identity with scoped, expiring, auditable access.
Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
Okta webinar says organizations should govern AI agents as identities to limit excessive access and shadow AI.
Top 10 Best Authentication-as-a-Service (AaaS) Providers in 2026 [Ranked & Scored]
A 2026 ranking names Auth0, Microsoft Entra External ID, and Firebase Auth the leading authentication-as-a-service providers.
1
Top 10 Best Cloud Directory Services in 2026 [Ranked & Scored]
A 2026 ranking puts Microsoft Entra ID first among cloud directories, ahead of JumpCloud and Okta.
3
AWS Lambda Flaw Lets Attackers Bypass IAM Permissions and Access Cloud Services
A high-severity flaw (CVE-2026-94384) in an AWS Lambda application could let attackers bypass IAM permissions and perform privileged cloud actions.
2
How One Kubernetes YAML Can Hand Over a GCP Organization
A design flaw in Google's Kubernetes Config Connector allows attackers with namespace access to take over an entire GCP organization using a single YAML file.
7
Aembit Launches Support for Okta Cross App Access, Extending Enterprise Identity Controls to AI Agents
Aembit adds Okta Cross App Access so enterprises can govern AI agent access with existing identity.