Hackers exploit trusted AWS access to breach multiple cloud environments

A threat actor used compromised IAM credentials associated with a Qubole AWS account to assume IAM roles trusted by multiple customer AWS accounts and exfiltrate data. The campaign ran from October 14 to 26 and affected tens of companies.