Uber dealing with "cybersecurity incident" after hacker appears to breach its system

[[correlate]]

Content source

https://www.cbsnews.com/news/uber-cybersecurity-incident-hacker-breach/

Uber said Thursday that it reached out to law enforcement after a hacker apparently breached its network. A security engineer said the intruder had provided evidence of obtaining access to crucial cloud systems at the ride-hailing service.
Uber tweeted Thursday night that it was "currently responding to a cybersecurity incident. We are in touch with law enforcement."

Uber dealing with "cybersecurity incident" after hacker appears to breach its system

There was no indication that Uber's fleet of vehicles or its operation was in any way affected.

www.cbsnews.com

 

[Freki123]

If the hacker is really only 18 years old then better start spending more money on security. The next one may be 30 with even more experience

Uber Investigating Breach of Its Computer Systems (Published 2022)

The company said on Thursday that it was looking into the scope of the apparent hack.

www.nytimes.com

 

[MacDefender]

If the hacker is really only 18 years old then better start spending more money on security. The next one may be 30 with even more experience

Uber Investigating Breach of Its Computer Systems (Published 2022)

The company said on Thursday that it was looking into the scope of the apparent hack.

www.nytimes.com

Yeah supposedly there was just a PowerShell script accessible on a network share that anyone with corporate VPN could get to. And it contained a huge trove of passwords including the master AWS and GSuite accounts and all their vSphere instances.


If that’s actually true, I am honestly shocked they haven’t had any breaches in the past. I work at a medium sized tech company and even there, at least once or twice a year we catch a malicious employee and either terminate or also refer them to law enforcement depending on how bad the offense is.

 

[upnorth]

If that’s actually true, I am honestly shocked they haven’t had any breaches in the past.

They do and it's not any flattering ones either.

Uber ignores vulnerability that lets you send any email from Uber.com

A vulnerability in Uber's email system allows just about anyone to send emails on behalf of Uber. The researcher who discovered this flaw warns this vulnerability can be abused by threat actors to email 57 million Uber users and drivers whose information was leaked in the 2016 data breach...

malwaretips.com

Uber Fined for Covering Up 2016 Data Breach

The time has come for Uber to pay the piper for the data breach two years ago that leaked personal details of 57 million users and drivers as two data protection offices in Europe set fines that collectively amount to over 1 million euros.

www.bleepingcomputer.com

 

[upnorth]

S3 Ep100.5: Uber breach – an expert speaks [Audio + Text]

Chester Wisniewski on what we can learn from Uber: “Just because a big company didn’t have the security they should doesn’t mean you can’t.”

nakedsecurity.sophos.com

 

[CyberTech]

More information on

What the Uber Hack can teach us about navigating IT Security

The recent Uber cyberattack shows us the myriad tactics employed by threat actors to breach corporate networks. Learn more about these tactics used and how to navigate IT Security.

www.bleepingcomputer.com