Security News > 2022 > September > S3 Ep101: Uber and LastPass breaches – is 2FA all it’s cracked up to be? [Audio + Text]

DUCK. Yes, Uber has come out with a follow up report, and it seems that they're suggesting that a hacking group like LAPSUS$ was responsible.

Just because you have those that's a security gate, but it's not the end-all and be-all to keeping someone out.

The idea of having somebody to help you review what's happening, particularly when you think something bad has just happened, is it means that you don't end up with security incidents being major distractions to your regular IT and Security Operations team.

DOUG. And then finally, we round ited out with a couple of tips for your staff: "Set up a cyber security hotline for your staff to report incidents", and trust them to help you out by reporting such incidents.

It's always the things that you didn't expect that will catch you out, because if you had expected them, you would probably have prevented them in the first place!

We're going to walk across and be careful not to fall out onto the platform but we're going to get into the LastPass car.

News URL

https://nakedsecurity.sophos.com/2022/09/22/s3-ep101-uber-and-lastpass-breaches-is-2fa-all-its-cracked-up-to-be-audio-text/