How a third-party compromise created a path into multiple organizations, and how Sentra uncovered it in less than 24 hours.
Sentra recently uncovered a very wide supply chain attack that moved through organization after organization. Dozens of Qubole customers were impacted. An attacker got hold of credentials belonging to Qubole, a big-data platform, and used the access that company after company had once granted Qubole to quietly pull their data. Nobody broke into these companies directly. The attacker came in through a vendor they all trusted.
This kind of risk is easy to miss. Your cloud is full of identities that aren't people: vendor integrations, automation and AI agents, each holding standing access to your data. Most days they do the same thing, from the same place, on the same schedule. The danger is the day one of them starts doing something else, and very few teams are watching for it.
