NewsSecurityWeek
Over a Dozen Organizations Hit in Qubole Supply Chain Attack
Teaser from the source
Hackers used compromised Qubole IAM credentials to steal customer files, secrets, keys, environment variables, and credentials. The post Over a Dozen Organizations Hit in Qubole Supply Chain Attack appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Organizations
Other advisories
- HighCVE-2026-120730Mass assignment of organization, product and deployment group IDs allows users to write into other organizations and receive their firmware
- Not ratedosv:CVE-2026-120730Mass assignment of organization, product and deployment group IDs allows users to write into other organizations and receive their firmware
- LowCVE-2026-71863SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymo…
- MediumCVE-2026-115474Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations where the Who can view all other users in the organization setting res…
- MediumCVE-2026-115574Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with web-public channels enabled exposed the GET /json/users endpoint to…
- MediumCVE-2026-119627The web profile and RSS/Atom feed routes of users and organizations checked only whether a signed-in viewer could see a limited-visibility owner, without con…
- MediumCVE-2026-118394The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether to limit the `groups` claim to public organizations by re-parsing the `Authorization` …
- MediumCVE-2026-116677OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
Other news entries
- How to Assess OT Incident Response PreparednessNewsDark Reading
- AI Coding Agents Leak Thousands of Secrets to GitHubNewsDark Reading
- Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware EcosystemNewsThe Hacker News
- Software Transparency Is Changing: Allan Friedman on SBOM, AI BOMs and What Comes NextNewsSecurityWeek
- Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin AmericaNewsThe Hacker News
- Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the GlobeNewsCheck Point Research
- AI Makes Reverse Engineering Mainstream Software & Malware Far EasierNewsDark Reading
- Turla hackers use new Cereal malware to spy on govt Exchange serversNewsBleepingComputer
Source: https://www.securityweek.com/over-a-dozen-organizations-hit-in-qubole-supply-chain-attack/
ID