9 results
Wiz says an attacker used IAM credentials from an AWS account associated with Qubole between Oct 14 and 26, 2026 to assume IAM roles that multiple customers had created to trust Qubole and enter their AWS environments .
Security firm Todyl says that since Nov 1 an attacker has been using stolen, still-valid credentials to sign in to MSPs' Microsoft 365 and Azure environments as their own applications, targeting about 45 app registrations at roughly 18 organizations with more than 33 authenticating successfully .
Nikkei Inc.
Taiwanese cloud deployment platform Zeabur published its preliminary investigation report: between October 14 and 15 (UTC), attackers used leaked internal credentials to access shared clusters, certain dedicated servers, and internal systems, ultimately reading the platform database and exposing 3,218,965 service environment variables and 321,810 user account records .
Fireworks AI updated its October security incident bulletin on November 9, saying that beyond previously known stored secrets it found impact to account and billing information, plus secrets, datasets and incomplete models for a limited set of accounts, with evidence pointing to a financially motivated cybercriminal group engaged in LLMJacking .
According to TechCrunch, market intelligence platform Klue confirmed hackers broke into its systems on June 12 and stole data from some customers, with affected customers including Gong, Jamf, HackerOne, LastPass, Recorded Future, Snyk and Tanium .
ST Unitas, operator of the Gongdangi exam-prep brands, announced on June 8, 2026 that some members' personal data leaked through unauthorized access to its operating system .
A joint government-civilian team under Korea's science ministry confirmed data from 39.
In 2024, Snowflake published guidance on detecting and preventing unauthorized access to customer accounts .