{"id":16690,"date":"2026-11-09T09:00:00","date_gmt":"2026-11-09T08:00:00","guid":{"rendered":"https:\/\/safewave.ai\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/"},"modified":"2026-11-10T20:24:14","modified_gmt":"2026-11-10T19:24:14","slug":"qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data","status":"publish","type":"post","link":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/","title":{"rendered":"Qubole supply chain attack: vendor&#8217;s trusted AWS roles abused to exfiltrate secrets and customer account data"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"16690\" class=\"elementor elementor-16690 elementor-16649\" data-elementor-post-type=\"post\">\n\t\t\t\t<header class=\"elementor-element elementor-element-69a6236 e-flex e-con-boxed e-con e-parent\" data-id=\"69a6236\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7cac elementor-widget elementor-widget-heading\" data-id=\"69a7cac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/safewave.ai\/en\/identity-and-secure-access\/\">Identity and Secure Access<\/a><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f76 elementor-widget elementor-widget-heading\" data-id=\"69a7f76\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Qubole supply chain attack: vendor's trusted AWS roles abused to exfiltrate secrets and customer account data<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a72db elementor-widget elementor-widget-text-editor\" data-id=\"69a72db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>On November 9, 2026, Wiz detailed compromises across AWS customer accounts of the Qubole platform. Between October 14 and 26, the threat actor assumed roles trusted by customers for Qubole integration, reading secrets \u2013 including AWS keys, Entra ID application credentials, and Okta credentials \u2013 and copying data from S3.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f83 elementor-widget elementor-widget-html\" data-id=\"69a7f83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<ul class=\"sw-meta\"><li><span>Source<\/span><a href=\"https:\/\/www.wiz.io\/blog\/qubole-cross-account-access-abused-in-the-wild\" target=\"_blank\" rel=\"noopener\">Wiz<\/a><\/li><li><span>Source publication<\/span>November 9, 2026<\/li><li><span>Type<\/span>Threats and incidents<\/li><\/ul>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/header>\n\t\t<article class=\"elementor-element elementor-element-69a7768 e-flex e-con-boxed e-con e-parent\" data-id=\"69a7768\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7465 elementor-widget elementor-widget-text-editor\" data-id=\"69a7465\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What happened<\/h2><p>Qubole, an Idera-owned data lake platform, operates in customer AWS accounts via IAM roles that trust the vendor&#8217;s account. According to Wiz, the attacker possessed credentials to Qubole&#8217;s own AWS account and used it to assume customer roles (AssumeRole). Every request included a valid External ID and succeeded. Most compromised roles were dormant yet still trusted Qubole&#8217;s account. How the attacker initially accessed the vendor&#8217;s account was not disclosed.<\/p><p>Across investigated accounts, the attacker accessed Lambda environment variables, Secrets Manager, and Parameter Store, validating retrieved credentials with TruffleHog. Harvested credentials included AWS user access keys, Entra ID app secrets, and Okta app credentials \u2013 belonging to the victim organizations, not the vendor. S3 buckets accessible to the roles were exfiltrated, occasionally copying entire buckets in a single session.<\/p><p>Activity was uncovered by Sentra across several customer environments. Separately, between October 8 and 11, an actor leveraged AWS access keys that researchers assess customers had created for Qubole \u2013 Wiz did not correlate this with the role-assumption activity. According to The Hacker News, neither Qubole nor Idera had issued a public statement by publication time. The number of affected customers remains undisclosed.<\/p><h2>Key findings<\/h2><ul><li>Role assumption: October 14\u201326, 2026; separate access-key use: October 8\u201311, 2026.<\/li><li>External ID did not prevent exploitation \u2013 AWS does not treat it as a secret, and CloudTrail logs it in plaintext.<\/li><li>Exfiltrated: Secrets from Lambda, Secrets Manager, and Parameter Store, along with S3 data; secrets included AWS keys, Entra ID app secrets, and Okta credentials.<\/li><li>According to Wiz, a simple source-IP condition in the trust policy would have stopped every observed role assumption.<\/li><li>No attribution; Wiz released IOCs to query logs back to October 1.<\/li><\/ul><h2>Why it matters<\/h2><div class=\"sw-take\"><span class=\"sw-take__k\">SafeWave Commentary<\/span>The attacker did not break through customer defenses \u2013 they entered through doors customers opened for a vendor and neglected to close when no longer needed. Trusted integration roles, keys in environment variables, and app secrets are machine identities unshielded by MFA, and in this campaign, they pivoted deeper into Entra ID, Okta, and S3 data. Under NIS2 and Poland&#8217;s KSC Act, this is also a supply chain security matter. Recommended actions: Inventory all IAM roles trusting external accounts and revoke dormant ones; scope trust to specific vendor principals and enforce source-IP or VPC-endpoint conditions; strip integration roles of read access to secrets, parameters, and broad S3 resources; rotate secrets and revoke active sessions immediately after a vendor incident; mandate organization-wide CloudTrail and S3 data events for sensitive buckets. We covered a similar workload identity theft pattern in the <a href=\"https:\/\/safewave.ai\/en\/silverfort-replicates-hugging-face-attack-autonomous-agent-steals-workload-identity-in-about-6-minutes\/\">Hugging Face attack<\/a>. Explore more under <a href=\"https:\/\/safewave.ai\/en\/identity-and-secure-access\/\">Identity and Secure Access<\/a>.<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t<aside class=\"elementor-element elementor-element-69a7d8c e-flex e-con-boxed e-con e-parent\" data-id=\"69a7d8c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f4a elementor-widget elementor-widget-text-editor\" data-id=\"69a7f4a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"sw-h\">Source<\/p><ul class=\"sw-src\"><li><a href=\"https:\/\/www.wiz.io\/blog\/qubole-cross-account-access-abused-in-the-wild\" target=\"_blank\" rel=\"noopener\">Wiz \u2013 Trusted by Default: Qubole Cross-Account Access Abused in the Wild<\/a><\/li><li><a href=\"https:\/\/thehackernews.com\/2026\/11\/hackers-exploit-quboles-trusted-aws.html\" target=\"_blank\" rel=\"noopener\">The Hacker News \u2013 Hackers Exploit Qubole&#8217;s Trusted AWS Access to Breach Customer Accounts and Steal Data<\/a><\/li><\/ul><p class=\"sw-rel\"><a href=\"https:\/\/safewave.ai\/en\/identity-and-secure-access\/\">Area: Identity and Secure Access \u2192<\/a><a href=\"https:\/\/safewave.ai\/en\/technology-intelligence\/\">All analyses \u2192<\/a><\/p><p class=\"sw-asof\">SafeWave editorial analysis based on the cited source. Facts come from the source; the &#8220;Why it matters&#8221; section is our commentary.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/aside>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>An attacker compromised data lake vendor Qubole&#8217;s AWS account to assume customer-trusted roles, exfiltrating secrets \u2013 including AWS keys, Entra ID, and Okta credentials \u2013 and S3 data.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"footnotes":""},"categories":[269],"tags":[],"class_list":["post-16690","post","type-post","status-publish","format-standard","hentry","category-identity-and-secure-access"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Qubole supply chain attack: vendor&#039;s trusted AWS roles abused to exfiltrate secrets and customer account data &#8211; SafeWave<\/title>\n<meta name=\"description\" content=\"An attacker compromised data lake vendor Qubole&#039;s AWS account to assume customer-trusted roles, exfiltrating secrets \u2013 including AWS keys, Entra ID, and Okta credentials \u2013 and S3 data.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Qubole supply chain attack: vendor&#039;s trusted AWS roles abused to exfiltrate secrets and customer account data &#8211; SafeWave\" \/>\n<meta property=\"og:description\" content=\"An attacker compromised data lake vendor Qubole&#039;s AWS account to assume customer-trusted roles, exfiltrating secrets \u2013 including AWS keys, Entra ID, and Okta credentials \u2013 and S3 data.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/\" \/>\n<meta property=\"og:site_name\" content=\"SafeWave\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-09T08:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-10T19:24:14+00:00\" \/>\n<meta name=\"author\" content=\"SafeWave\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"SafeWave\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\\\/\"},\"author\":{\"name\":\"SafeWave\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/person\\\/9e9fc64ff61c418abb6f658be85dcf4a\"},\"headline\":\"Qubole supply chain attack: vendor&#8217;s trusted AWS roles abused to exfiltrate secrets and customer account data\",\"datePublished\":\"2026-11-09T08:00:00+00:00\",\"dateModified\":\"2026-11-10T19:24:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\\\/\"},\"wordCount\":572,\"publisher\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\"},\"articleSection\":[\"Identity and Secure Access\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\\\/\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\\\/\",\"name\":\"Qubole supply chain attack: vendor's trusted AWS roles abused to exfiltrate secrets and customer account data &#8211; SafeWave\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#website\"},\"datePublished\":\"2026-11-09T08:00:00+00:00\",\"dateModified\":\"2026-11-10T19:24:14+00:00\",\"description\":\"An attacker compromised data lake vendor Qubole's AWS account to assume customer-trusted roles, exfiltrating secrets \u2013 including AWS keys, Entra ID, and Okta credentials \u2013 and S3 data.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/safewave.ai\\\/en\\\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Qubole supply chain attack: vendor&#8217;s trusted AWS roles abused to exfiltrate secrets and customer account data\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\",\"name\":\"SafeWave\",\"description\":\"We protect your AI models, data, applications, systems and users. Also in the cloud and based on cloud\",\"publisher\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\"},\"alternateName\":\"SafeWave sp. z o.o.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/safewave.ai\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\",\"name\":\"SafeWave\",\"alternateName\":\"SafeWave sp. z o.o.\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/safewave.ai\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/SafeWave-BLACK_350.png\",\"contentUrl\":\"https:\\\/\\\/safewave.ai\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/SafeWave-BLACK_350.png\",\"width\":350,\"height\":270,\"caption\":\"SafeWave\"},\"image\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/safewave-ai\",\"https:\\\/\\\/www.youtube.com\\\/@SafeWaveAI\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/person\\\/9e9fc64ff61c418abb6f658be85dcf4a\",\"name\":\"SafeWave\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"caption\":\"SafeWave\"},\"description\":\"Zesp\u00f3\u0142 SafeWave \u2013 cyberbezpiecze\u0144stwo i AI dla firm od 1998 roku. Analizy Technology Intelligence przygotowujemy z pomoc\u0105 AI i weryfikujemy redakcyjnie.\",\"sameAs\":[\"https:\\\/\\\/safewave.ai\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Qubole supply chain attack: vendor's trusted AWS roles abused to exfiltrate secrets and customer account data &#8211; SafeWave","description":"An attacker compromised data lake vendor Qubole's AWS account to assume customer-trusted roles, exfiltrating secrets \u2013 including AWS keys, Entra ID, and Okta credentials \u2013 and S3 data.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/","og_locale":"en_US","og_type":"article","og_title":"Qubole supply chain attack: vendor's trusted AWS roles abused to exfiltrate secrets and customer account data &#8211; SafeWave","og_description":"An attacker compromised data lake vendor Qubole's AWS account to assume customer-trusted roles, exfiltrating secrets \u2013 including AWS keys, Entra ID, and Okta credentials \u2013 and S3 data.","og_url":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/","og_site_name":"SafeWave","article_published_time":"2026-11-09T08:00:00+00:00","article_modified_time":"2026-11-10T19:24:14+00:00","author":"SafeWave","twitter_card":"summary_large_image","twitter_misc":{"Written by":"SafeWave","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/#article","isPartOf":{"@id":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/"},"author":{"name":"SafeWave","@id":"https:\/\/safewave.ai\/en\/#\/schema\/person\/9e9fc64ff61c418abb6f658be85dcf4a"},"headline":"Qubole supply chain attack: vendor&#8217;s trusted AWS roles abused to exfiltrate secrets and customer account data","datePublished":"2026-11-09T08:00:00+00:00","dateModified":"2026-11-10T19:24:14+00:00","mainEntityOfPage":{"@id":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/"},"wordCount":572,"publisher":{"@id":"https:\/\/safewave.ai\/en\/#organization"},"articleSection":["Identity and Secure Access"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/","url":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/","name":"Qubole supply chain attack: vendor's trusted AWS roles abused to exfiltrate secrets and customer account data &#8211; SafeWave","isPartOf":{"@id":"https:\/\/safewave.ai\/en\/#website"},"datePublished":"2026-11-09T08:00:00+00:00","dateModified":"2026-11-10T19:24:14+00:00","description":"An attacker compromised data lake vendor Qubole's AWS account to assume customer-trusted roles, exfiltrating secrets \u2013 including AWS keys, Entra ID, and Okta credentials \u2013 and S3 data.","breadcrumb":{"@id":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/safewave.ai\/en\/qubole-supply-chain-attack-vendors-trusted-aws-roles-abused-to-exfiltrate-secrets-and-customer-account-data\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/safewave.ai\/en\/"},{"@type":"ListItem","position":2,"name":"Qubole supply chain attack: vendor&#8217;s trusted AWS roles abused to exfiltrate secrets and customer account data"}]},{"@type":"WebSite","@id":"https:\/\/safewave.ai\/en\/#website","url":"https:\/\/safewave.ai\/en\/","name":"SafeWave","description":"We protect your AI models, data, applications, systems and users. Also in the cloud and based on cloud","publisher":{"@id":"https:\/\/safewave.ai\/en\/#organization"},"alternateName":"SafeWave sp. z o.o.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/safewave.ai\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/safewave.ai\/en\/#organization","name":"SafeWave","alternateName":"SafeWave sp. z o.o.","url":"https:\/\/safewave.ai\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/safewave.ai\/en\/#\/schema\/logo\/image\/","url":"https:\/\/safewave.ai\/wp-content\/uploads\/2022\/05\/SafeWave-BLACK_350.png","contentUrl":"https:\/\/safewave.ai\/wp-content\/uploads\/2022\/05\/SafeWave-BLACK_350.png","width":350,"height":270,"caption":"SafeWave"},"image":{"@id":"https:\/\/safewave.ai\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/safewave-ai","https:\/\/www.youtube.com\/@SafeWaveAI"]},{"@type":"Person","@id":"https:\/\/safewave.ai\/en\/#\/schema\/person\/9e9fc64ff61c418abb6f658be85dcf4a","name":"SafeWave","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","caption":"SafeWave"},"description":"Zesp\u00f3\u0142 SafeWave \u2013 cyberbezpiecze\u0144stwo i AI dla firm od 1998 roku. Analizy Technology Intelligence przygotowujemy z pomoc\u0105 AI i weryfikujemy redakcyjnie.","sameAs":["https:\/\/safewave.ai"]}]}},"_links":{"self":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/comments?post=16690"}],"version-history":[{"count":4,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16690\/revisions"}],"predecessor-version":[{"id":16704,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16690\/revisions\/16704"}],"wp:attachment":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/media?parent=16690"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/categories?post=16690"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/tags?post=16690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}