UBER UPDATE
UBER RESPONDS TO CYBER SECURITY INCIDENT AFTER HACK BREACHES INTERNAL SYSTEMS
Uber has been hacked in an attack that appears to have breached its internal systems. The ride-hailing company confirmed it was responding to
a
“cybersecurity incident”, after the New York Times reported that a hack had accessed the company’s network and forced it to take several internal communications and engineering systems offline. The hacker claimed to be 18 years old. Uber confirmed that there are no issues with the company’s service. A hacker compromised the employee workplace messaging app Slack and used it to send a message to Uber employees announcing that it had suffered a data breach. Sam Curry of Yuga Labs was contacted by the Uber hacker on the HackerOne platform and had been shown “very convincing” screenshots of full administrative access to Uber’s cloud services. “From my understanding, the attacker had keys to the kingdom after obtaining an internal file with credentials to nearly everything,” Curry told the Guardian.
He added: “Based on the screenshots and my understanding of the hack, they likely had access to read/modify the cloud services which run Uber and store user information.” The company has been hacked before. Its former chief security officer, Joseph Sullivan, is on trial on allegations he arranged to pay hackers $100,000 as part of an attempt to cover up a 2016 attack in which the personal information of about 57 million customers and drivers was stolen. Alan Woodward, a professor of cybersecurity at Surrey University, said: “As the hacker does appear to have such high-level access it’s also going to be difficult for Uber to know they have managed to remove the hacker from the network. It could mean a major rebuild of their systems, which will cause serious disruption.” “We are in touch with law enforcement and will post additional updates here as they become available,” Uber said in the tweet confirming the attack. The Slack system was taken offline on the afternoon of Thursday 15 September, by Uber after employees received the message from the hacker. “I announce I am a hacker and Uber has suffered a
PHTM OCTOBER 2022
data breach,” the message read, going on to list several internal databases that were claimed to be compromised, the report added. The person who claimed responsibility for the hack said they gained access through social engineering, a term for tricking an employee into granting access. The hacker, who had provided a Telegram account address, said they broke in because the company had weak security, according to the report. In the Slack message that announced the breach, the person also said Uber drivers should get higher pay.
NEW SOUTH WALES SERVICE LEVY EXTENDED UNTIL 2029
NSW ride-hailing and taxi passengers will pay levies for another two years – until June 2029 – as taxi licence owners move a step closer to securing further compensation. The government has outlined its plan to deliver a further $500m to licence holders, on top of $145m already doled out, as part of plans for the complete deregulation of the industry. The compensation for taxi licence owners was in response to the rise of apps such as Uber that disrupted the industry despite not being legal when the services launched. Passengers in NSW pay a $1 passenger service levy to fund compensation for taxi licence holders which will now be extended for two years. The scheme was introduced in 2018 to fund industry adjustment packages up to $250m. As of June, it had collected more than $259m, according to Revenue NSW data. Uber said it was disappointed with the extension, calling it “a tax paid by consumers when they take any taxi or rideshare trip”.
71
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46 |
Page 47 |
Page 48 |
Page 49 |
Page 50 |
Page 51 |
Page 52 |
Page 53 |
Page 54 |
Page 55 |
Page 56 |
Page 57 |
Page 58 |
Page 59 |
Page 60 |
Page 61 |
Page 62 |
Page 63 |
Page 64 |
Page 65 |
Page 66 |
Page 67 |
Page 68 |
Page 69 |
Page 70 |
Page 71 |
Page 72 |
Page 73 |
Page 74 |
Page 75 |
Page 76 |
Page 77 |
Page 78 |
Page 79 |
Page 80 |
Page 81 |
Page 82 |
Page 83 |
Page 84 |
Page 85 |
Page 86
