Supply chain attack on Qubole customers

What happened: Sentra uncovered a supply chain attack in which an attacker used stolen Qubole credentials to access data at dozens of Qubole customers, then reported it to Wiz, which investigated with Sentra and Mandiant. Key numbers: More than a dozen organizations hacked; about one second to assume each Qubole-trusted role; about 100 passwords and keys read in 7 Why it matters: The attacker presented valid ExternalIds and came from outside Qubole's network, so best-practice setup did not stop it. The content says only zero trust limits and data detection and response catch this behavior.

Sentra uncovered a supply chain attack in which an attacker used stolen Qubole credentials to access data at dozens of Qubole customers, then reported it to Wiz, which investigated with Sentra and Mandiant.

The attacker presented valid ExternalIds and came from outside Qubole's network, so best-practice setup did not stop it. The content says only zero trust limits and data detection and response catch this behavior.