Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

2026-11-10T01:24:01Z•a039738856e99102886569fc558ce21791d0465b903eed2b2578a3ec442bc416
CVE-2026-116606CVE-2026-123158CVE-2026-19868CVE-2026-83844AI securityAWSMFA bypassOpenSSHSonicWall SonicOSWordPressactive exploitationauthentication bypassbackdoorcloud breachcredential theftcryptocurrencycyberespionageindustrial control systemsmalwareremote code executionsupply-chain compromisevulnerability

What happened

The feed reports multiple active or high-impact cybersecurity incidents, including exploited vulnerabilities, supply-chain compromises, cloud account breaches, credential and wallet theft, ransomware/backdoors, and attacks against industrial and automotive systems. Particularly urgent items include the actively exploited SonicWall SonicOS MFA bypass (CVE-2026-19868), OpenSSH SSHole authentication bypass (CVE-2026-123158), Microsoft Paint RCE (CVE-2026-83844), and Barracuda Email Security Gateway flaws including CVE-2026-116606. Several incidents involve theft of secrets, cryptocurrency wallets

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
a039738856e99102886569fc558ce21791d0465b903eed2b2578a3ec442bc416
Enrichment time
2026-11-10T01:24:01Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.