Likes from 16 September 2022

The hard truth is that most orgs in the world could be hacked in the exact way Uber was just hacked bc most do not employ the numerous best practices we’re talking about here to reduce the risks we just saw in this attack. This is a learning moment for almost everyone everywhere.

Rachel Tobac (@RachelTobac)Fri, 16 Sept 2022 15:50 +0000

When the individual breached Uber, they sent a slack notification to everyone informing them the company had been breached. Employees thought it was a joke. Photo via @ColtonSeal

vx-underground (@vxunderground)Fri, 16 Sept 2022 04:11 +0000

(shakira at the dispensary) sativa sativa

teryn (@youngtiddy)Thu, 15 Sept 2022 22:00 +0000

The Uber hack looks really bad. Someone posted a bunch of screenshots from what appears to be an account with Admin access to AWS and GCloud, as well as screenshots from the expenses dashboard. Haven't been able to confirm them, but they look legit.

Marcus Hutchins (@MalwareTechBlog)Fri, 16 Sept 2022 02:26 +0000

https://twitter.com/David_desJ/status/1570637780283453441

You certainly cared enough to reply to the tweet instead of scrolling past like any normal person

Marcus Hutchins (@MalwareTechBlog)Fri, 16 Sept 2022 05:36 +0000

https://twitter.com/NobCrypto69/status/1570733644079337473

No if he was autistic he would probably reply with an insightful, logical analysis or response. Unlike your pathetic attempt to falsely stereotype.

Jonny Mac (@maccelari)Fri, 16 Sept 2022 11:35 +0000

Uber, what you need to know, the thread. 1)

Kevin Beaumont (@GossiTheDog)Fri, 16 Sept 2022 10:15 +0000

https://twitter.com/vxunderground/status/1570595933641113601

Update: A Threat Actor claims to have completely compromised Uber - they have posted screenshots of their AWS instance, HackerOne administration panel, and more. They are openly taunting and mocking @Uber.

vx-underground (@vxunderground)Fri, 16 Sept 2022 02:16 +0000