Security News > 2022 > September > Uber reels from 'security incident’ in which cloud systems seemingly hijacked
Update: A Threat Actor claims to have completely compromised Uber - they have posted screenshots of their AWS instance, HackerOne administration panel, and more.
Bug hunter Sam Curry claims to have heard from an Uber employee.
Feel free to share but please don't credit me: at Uber, we got an "URGENT" email from IT security saying to stop using Slack.
The New York Times has also reported that Uber staff have been told to stop using the corporate Slack, and that the call to quit the messaging app came after the intruder shared a message stating: "I announce I am a hacker and Uber has suffered a data breach."
At the time of writing, your vulture's access to Uber and Uber Eats was in no way disrupted, and I have received no email or other notification from Uber regarding the incident.
Uber experienced a massive data breach in 2016 and tried to cover it up.
News URL
https://go.theregister.com/feed/www.theregister.com/2022/09/16/uber_security_incident/
Related news
- How AI Is Changing the Cloud Security and Risk Equation (source)
- Strategies for CISOs navigating hybrid and multi-cloud security (source)
- Enhancing visibility for better security in multi-cloud and hybrid environments (source)
- Microsoft Fixes AI, Cloud, and ERP Security Flaws; One Exploited in Active Attacks (source)
- AWS unveils cloud security IR service for a mere $7K a month (source)
- Are Long-Lived Credentials the New Achilles’ Heel for Cloud Security? (source)
- Best CSPM Tools 2024: Top Cloud Security Solutions Compared (source)
- CrowdStrike vs Wiz: Which Offers Better Cloud Security and Value? (source)
- CISA Mandates Cloud Security for Federal Agencies by 2025 Under Binding Directive 25-01 (source)