Optus hacked, records of 9.8 million customers stolen

[Carlin]

Security News This Week: TikTok Admits Staff in China Can Access Europeans’ Data

https://www.wired.com/category/security/cyberattacks-hacks/

[kompir]

Optus are stopping short of saying someone within the organisation was paid by a 3rd party to make this happen.

[Carlin]

Uber hack

Uber’s hack shows the stubborn power of social engineering

https://www.theverge.com/2022/9/16/23356959/uber-hack-social-engineering-threats

"One of the powershell scripts contained the username and password for a admin user in Thycotic (PAM) Using this i was able to extract secrets for all services, DA, DUO, Onelogin, AWS, GSuite" pic.twitter.com/FhszpxxUEW

— Corben Leo (@hacker_) September 16, 2022

Uber apparently hacked by teen, employees thought it was a joke

https://www.theverge.com/2022/9/16/23356213/uber-hack-teen-slack-google-cloud-credentials-powershell

The hacker appears to have made themselves known to Uber’s employees by posting a message on the company’s internal Slack system. “I announce I am a hacker and Uber has suffered a data breach,” screenshots of the message circulating on Twitter read. The claimed hacker then listed confidential company information they said they’d accessed, and posted a hashtag saying that Uber underpays its drivers.

The Slack message from the alleged hacker was so brazen that many Uber employees appear to have initially thought it was a joke, the Washington Post reports. Employee responses to the post included lighthearted emoji like sirens and popcorn, as well as the “it’s happening” GIF. One unnamed Uber employee told Yuga Labs security engineer Sam Curry that staff were interacting with the hacker thinking they were playing a joke.

[kompir]

Someone is claiming to have stolen the Optus data:

https://twitter.com/Jeremy_Kirk/status/1573407117566152704

[kompir]

It isn't a mass mailout, it looks as though they're notifying based on how much of a customers data has been exposed.

[Carlin]

'Looks like Optus has started to contact people affected by the hack'

https://twitter.com/cameronwilson/status/1573164371286827009?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1573164371286827009%7Ctwgr%5Efb4af1223bab176d55c17788e2221b251f1e1f8a%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Fd-24130698741100931494.ampproject.net%2F2209072154000%2Fframe.html

[kompir]

This isn't a result/consequence of the free market, this is rooted in crony capitalism, the corporatocracy.

[Carlin]

Oh, the "free market" will take care of security issues at Uber, Twitter, and every other major company

[kompir]

https://www.abc.net.au/news/2022-09-23/optus-hack-likely-result-of-human-error/101468846

Except it wasn't human error. The db and API were purposely put on a network that was accessible from the open internet.