Uber Data Breach Shows Problems with 2FA - ThreatWire (AUDIO ONLY) (Patreon)

The LastPass Hack Lasted Four Days, Uber Data Breach Shows Problems with 2FA, and Putty is being used to backdoor victims! All that coming up now on ThreatWire.

 #threatwire #hak5

Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering cybersecurity topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/0UIOTS_5RyE

ThreatWire Totem Board - Limited Edition! - https://snubsie.com/threatwire-products/tw-totem 

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Chapters:

0:00 Hacked for Four Days

2:17  2FA Fatigue

5:16 Fake PuTTY = Backdoor

Links:

https://thehackernews.com/2022/09/hackers-had-access-to-lastpasss.html

https://blog.lastpass.com/2022/08/notice-of-recent-security-incident/

https://www.bleepingcomputer.com/news/security/lastpass-says-hackers-had-internal-access-for-four-days/

https://twitter.com/Uber_Comms/status/1570584747071639552

https://thehackernews.com/2022/09/uber-says-its-investigating-potential.html

https://www.zdnet.com/article/uber-security-breach-looks-bad-potentially-compromising-all-systems/

https://www.bleepingcomputer.com/news/security/uber-hacked-internal-systems-breached-and-vulnerability-reports-stolen/

https://arstechnica.com/information-technology/2022/09/uber-was-hacked-to-its-core-purportedly-by-an-18-year-old-here-are-the-basics/

https://www.uber.com/newsroom/security-update/

https://www.vice.com/en/article/5d35yd/the-uber-hack-shows-push-notification-2fa-has-a-downside-its-too-annoying

https://thehackernews.com/2022/09/uber-claims-no-sensitive-data-exposed.html

https://www.bleepingcomputer.com/news/security/hackers-trojanize-putty-ssh-client-to-backdoor-media-company/

https://www.mandiant.com/resources/blog/dprk-whatsapp-phishing

https://thehackernews.com/2022/09/north-korean-hackers-spreading.html

https://arstechnica.com/information-technology/2022/09/trojanized-versions-of-putty-utility-being-used-to-spread-backdoor/ 

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Our Site → https://www.hak5.org

Shop →  http://hakshop.myshopify.com/

Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1

Support → https://www.patreon.com/threatwire

Contact Us → http://www.twitter.com/hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________

Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.