Uber Claims No Sensitive Data Exposed in Latest Breach… But There’s More to This

Uber Claims No Sensitive Data Exposed in Latest Breach… But There’s More to This

,

Uber, in an update, said there is « no evidence » that users’ private information was compromised in a breach of its internal computer systems that was discovered late Thursday.
« We have no evidence that the incident involved access to sensitive user data (like trip history), » the company said. « All of our services including Uber, Uber Eats, Uber Freight, and the Uber Driver app are operational. »

,

Uber, in an update, said there is « no evidence » that users’ private information was compromised in a breach of its internal computer systems that was discovered late Thursday.
« We have no evidence that the incident involved access to sensitive user data (like trip history), » the company said. « All of our services including Uber, Uber Eats, Uber Freight, and the Uber Driver app are operational. »

, ,
https://thehackernews.com/2022/09/uber-claims-no-sensitive-data-exposed.html

Hackers Had Access to LastPass’s Development Systems for Four Days

Hackers Had Access to LastPass’s Development Systems for Four Days

,

Password management solution LastPass shared more details pertaining to the security incident last month, disclosing that the threat actor had access to its systems for a four-day period in August 2022.
« There is no evidence of any threat actor activity beyond the established timeline, » LastPass CEO Karim Toubba said in an update shared on September 15, adding, « there is no evidence that this

,

Password management solution LastPass shared more details pertaining to the security incident last month, disclosing that the threat actor had access to its systems for a four-day period in August 2022.
« There is no evidence of any threat actor activity beyond the established timeline, » LastPass CEO Karim Toubba said in an update shared on September 15, adding, « there is no evidence that this

, ,
https://thehackernews.com/2022/09/hackers-had-access-to-lastpasss.html

Researchers Find Link b/w PrivateLoader and Ruzki Pay-Per-Install Services

Researchers Find Link b/w PrivateLoader and Ruzki Pay-Per-Install Services,

Cybersecurity researchers have exposed new connections between a widely used pay-per-install (PPI) malware service known as PrivateLoader and another PPI service dubbed ruzki.
« The threat actor ruzki (aka les0k, zhigalsz) advertises their PPI service on underground Russian-speaking forums and their Telegram channels under the name ruzki or zhigalsz since at least May 2021, » SEKOIA said.
The

,

Cybersecurity researchers have exposed new connections between a widely used pay-per-install (PPI) malware service known as PrivateLoader and another PPI service dubbed ruzki.
« The threat actor ruzki (aka les0k, zhigalsz) advertises their PPI service on underground Russian-speaking forums and their Telegram channels under the name ruzki or zhigalsz since at least May 2021, » SEKOIA said.
The

, ,
https://thehackernews.com/2022/09/researchers-find-link-bw-privateloader.html

North Korean Hackers Spreading Trojanized Versions of PuTTY Client Application

North Korean Hackers Spreading Trojanized Versions of PuTTY Client Application,

A threat with a North Korea nexus has been found leveraging a « novel spear phish methodology » that involves making use of trojanized versions of the PuTTY SSH and Telnet client.
Google-owned threat intelligence firm Mandiant attributed the new campaign to an emerging threat cluster it tracks under the name UNC4034.
« UNC4034 established communication with the victim over WhatsApp and lured them

,

A threat with a North Korea nexus has been found leveraging a « novel spear phish methodology » that involves making use of trojanized versions of the PuTTY SSH and Telnet client.
Google-owned threat intelligence firm Mandiant attributed the new campaign to an emerging threat cluster it tracks under the name UNC4034.
« UNC4034 established communication with the victim over WhatsApp and lured them

, ,
https://thehackernews.com/2022/09/north-korean-hackers-spreading.html

How to Use a UTM Solution & Win Time, Money and Resources

How to Use a UTM Solution & Win Time, Money and Resources

,

Unified threat management is thought to be a universal solution for many reasons. First of all, it is compatible with almost any hardware. As a business or an MSP, you don’t have to bother with leasing or subleasing expensive equipment. There is no need to chase your clients to return your costly hardware. The all-in-one UTM solution will save you money and time & make work routine less

,

Unified threat management is thought to be a universal solution for many reasons. First of all, it is compatible with almost any hardware. As a business or an MSP, you don’t have to bother with leasing or subleasing expensive equipment. There is no need to chase your clients to return your costly hardware. The all-in-one UTM solution will save you money and time & make work routine less

, ,
https://thehackernews.com/2022/09/how-to-use-utm-solution-win-time-money.html

Hackers Targeting WebLogic Servers and Docker APIs for Mining Cryptocurrencies

Hackers Targeting WebLogic Servers and Docker APIs for Mining Cryptocurrencies,

Malicious actors such as Kinsing are taking advantage of both recently disclosed and older security flaws in Oracle WebLogic Server to deliver cryptocurrency-mining malware.
Cybersecurity company Trend Micro said it found the financially-motivated group leveraging the vulnerability to drop Python scripts with capabilities to disable operating system (OS) security features such as

,

Malicious actors such as Kinsing are taking advantage of both recently disclosed and older security flaws in Oracle WebLogic Server to deliver cryptocurrency-mining malware.
Cybersecurity company Trend Micro said it found the financially-motivated group leveraging the vulnerability to drop Python scripts with capabilities to disable operating system (OS) security features such as

, ,
https://thehackernews.com/2022/09/hackers-targeting-weblogic-servers-and.html

Microsoft Edge : attention, des pirates détournent le flux d’actualité du navigateur pour vous escroquer

Microsoft Edge : attention, des pirates détournent le flux d’actualité du navigateur pour vous escroquer,

,

Logo Microsoft Edge

Des pirates injectent de fausses publicités dans le flux d’actualités du navigateur de Microsoft pour piéger les utilisateurs. En cliquant dessus, ils sont redirigés vers des pages frauduleuses dissimulant une escroquerie au support technique.

L’article Microsoft Edge : attention, des pirates détournent le flux d’actualité du navigateur pour vous escroquer est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/microsoft-edge-des-pirates-detournent-le-flux-dactualite-du-navigateur-pour-vous-escroquer.html

Uber piraté : un hacker aurait entièrement compromis l’entreprise de VTC

Uber piraté : un hacker aurait entièrement compromis l’entreprise de VTC,

,

Un client commande une course Uber

Une nouvelle grosse tuile pour Uber ? L’entreprise reconnaît être la victime d’un « incident de sécurité ». D’après plusieurs experts, le pirate aurait eu accès à une somme de données sensibles considérable.

L’article Uber piraté : un hacker aurait entièrement compromis l’entreprise de VTC est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/uber-pirate-un-hacker-aurait-entierement-compromis-lentreprise-de-vtc.html

Uber Says It’s Investigating a Potential Breach of Its Computer Systems

Uber Says It’s Investigating a Potential Breach of Its Computer Systems

,

Ride hailing giant Uber disclosed Thursday it’s responding to a cybersecurity incident involving a breach of its network and that it’s in touch with law enforcement authorities.
The New York Times first reported the incident.  The company pointed to its tweeted statement when asked for comment on the matter.

The hack is said to have forced the company to take its internal

,

Ride hailing giant Uber disclosed Thursday it’s responding to a cybersecurity incident involving a breach of its network and that it’s in touch with law enforcement authorities.
The New York Times first reported the incident.  The company pointed to its tweeted statement when asked for comment on the matter.

The hack is said to have forced the company to take its internal

, ,
https://thehackernews.com/2022/09/uber-says-its-investigating-potential.html

Researchers Warn of Self-Spreading Malware Targeting Gamers via YouTube

Researchers Warn of Self-Spreading Malware Targeting Gamers via YouTube,

Gamers looking for cheats on YouTube are being targeted with links to malicious password-protected archive files designed to install the RedLine Stealer malware and crypto miners on compromised machines.
« The videos advertise cheats and cracks and provide instructions on hacking popular games and software, » Kaspersky security researcher Oleg Kupreev said in a new report published today.

,

Gamers looking for cheats on YouTube are being targeted with links to malicious password-protected archive files designed to install the RedLine Stealer malware and crypto miners on compromised machines.
« The videos advertise cheats and cracks and provide instructions on hacking popular games and software, » Kaspersky security researcher Oleg Kupreev said in a new report published today.

, ,
https://thehackernews.com/2022/09/researchers-warn-of-self-spreading.html