Qubole

Attacker abuses Qubole platform AWS account credentials to assume customers' trusted roles and steal secrets and S3 data

Wiz says an attacker used IAM credentials from an AWS account associated with Qubole between Oct 14 and 26, 2026 to assume IAM roles that multiple customers had created to trust Qubole and enter their AWS environments .