NewsBleepingComputer
Hackers exploit trusted AWS access to breach multiple cloud environments
Teaser from the source
A threat actor used compromised identity and access management (IAM) credentials for a Qubole big data platform's AWS account to access and exfiltrate data from multiple customers' AWS environments. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on environments
Other advisories
- MediumCVE-2026-108262DDEV is an open-source tool for running local web development environments for PHP and Node.js. From 1.25.2 until 1.25.4, Untar in pkg/archive/archive.go val…
- Not ratedosv:CVE-2026-120634CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrowser buffer
- MediumCVE-2026-120634CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrowser buffer.
- CriticalCVE-2026-4052This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-re…
- Not ratedosv:CLEANSTART-2024-DE37249x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so cal...
- Not ratedosv:CLEANSTART-2024-VE21564x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so calle...
- HighCVE-2026-115586virtualenv is a tool for creating isolated virtual python environments. From 21.14.9 until 21.14.13, the bash bin/activate script can copy an attacker-contro…
- HighCVE-2026-113726virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environme…
Other news entries
- Qubole supply chain attack exposed AWS, Entra ID, and Okta credentialsNewsCSO Online
- N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC ExploitsNewsThe Hacker News
- N-able takes cloud platform offline after 30+ "zero-days" publishedNewsBleepingComputer
- Trigger.dev: attacker accessed environment variables and root API keys for 0.66% of customersBreachpwn.watch
- Devs Hit by Trojanized Claude Code Extension for CursorNewsDark Reading
- PHP2Shell will persist in enterprise environments for yearsNewsCSO Online
- CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan TargetsNewsThe Hacker News
- University of Copenhagen data breach exposes data of 525,000 peopleNewsBleepingComputer
ID