Security News > 2022 > September > Uber reels from 'security incident’ in which cloud systems seemingly hijacked

Uber reels from 'security incident’ in which cloud systems seemingly hijacked
2022-09-16 03:13

Update: A Threat Actor claims to have completely compromised Uber - they have posted screenshots of their AWS instance, HackerOne administration panel, and more.

Bug hunter Sam Curry claims to have heard from an Uber employee.

Feel free to share but please don't credit me: at Uber, we got an "URGENT" email from IT security saying to stop using Slack.

The New York Times has also reported that Uber staff have been told to stop using the corporate Slack, and that the call to quit the messaging app came after the intruder shared a message stating: "I announce I am a hacker and Uber has suffered a data breach."

At the time of writing, your vulture's access to Uber and Uber Eats was in no way disrupted, and I have received no email or other notification from Uber regarding the incident.

Uber experienced a massive data breach in 2016 and tried to cover it up.


News URL

https://go.theregister.com/feed/www.theregister.com/2022/09/16/uber_security_incident/