Cloud Security
Threat Actors Abuse Trusted AWS Roles in Qubole Platform to Breach Cloud Environments
Attackers abused compromised Qubole IAM credentials to access downstream AWS environments through cross-account roles, harvesting secrets a…
Topic
IAM
Everything we've published about IAM.
Vulnerability
OneLogin API Vulnerability Allowed Secret Theft, App Impersonation
A critical flaw in the One Identity OneLogin platform could have allowed attackers to pilfer sensitive OpenID Connect client secrets. Exper…