Uber Technologies, Inc. (NYSE: UBER) said on Friday that it is “currently responding to a cybersecurity incident” after it was reported that a hacker infiltrated the company’s internal network. — Uber Comms (@Uber_Comms) September 16, 2022To add salt to the proverbial digital wound, the hacker–reportedly an 18-year old–himself announced the hack to Uber employees via compromising the Slack account of one of them to send the message. “I announce I am a hacker and Uber has suffered a data breach,” the message read. The attacker shared several screenshots of Uber's internal environment, including their GDrive, VCenter, sales metrics, Slack, and even their EDR portal. EDRs can bake in "backdoors" for IR, such as allowing IR teams to "shell into" employee machines (if enabled), potentially widening the attacker's access.

Source: New York Times September 16, 2022 14:35 UTC