10 results
Wiz says an attacker used IAM credentials from an AWS account associated with Qubole between Oct 14 and 26, 2026 to assume IAM roles that multiple customers had created to trust Qubole and enter their AWS environments .
Security firm Todyl says that since Nov 1 an attacker has been using stolen, still-valid credentials to sign in to MSPs' Microsoft 365 and Azure environments as their own applications, targeting about 45 app registrations at roughly 18 organizations with more than 33 authenticating successfully .
BleepingComputer reports that Russian cloud and hosting provider Beget said an attacker gained access to the management systems of its entire architecture on the night of Nov 1 and deployed malware that erased server data, after which Beget disconnected all servers .
Railway said the attack ran from October 20 to 22 and aimed to obtain AI provider API keys for distillation attacks, interrupting builds and deployments .
GMO Internet said that on October 20 it confirmed a third party had planted a malicious program on some customer servers of its Onamae.
Nikkei Inc.
Japanese cloud provider IDC Frontier said on October 7 that an outage in its IDCF Cloud East Japan Region 1 starting at about 3:40 a.
Japanese cloud and hosting provider Sakura Internet said in its third report on September 10 that it detected an anomaly on a maintenance server for its rental server service on August 9, and found unauthorized access to rental servers with malware planted, affecting 951 accounts .
According to TechCrunch, healthcare technology company CareCloud confirmed hackers accessed one of its electronic health record stores in March 2026; according to BleepingComputer, it disclosed the incident in an SEC filing in March, noting an 8-hour platform disruption .
CERT-EU said the AWS account behind the European Commission's europa.