‼️ Uber Confirms Data Breach – Hackers Stole Users’ Personal Information
Details: https://t.co/bRl1PjU3bw
Uber has confirmed a data breach involving the personal information of thousands of U.S. drivers after hackers accessed records held by Fireworks AI, a third-party technology provider.
The exposed information includes driver’s license details. Uber is notifying affected people, but it has not disclosed the total number impacted nationwide.
The incident became known to Uber on October 9, 2026, when its service provider reported that an unauthorized party had compromised internal login credentials.
Those credentials allowed the attacker to access Uber’s account with the provider, creating a path to personal records stored outside Uber’s own systems.
#cybersecuritynews
Microsoft Threat Intelligence observed an active phishing campaign exploiting the Microsoft 365 service disruption on November 12. The messages impersonate Microsoft 365 service health notifications and reference the legitimate Exchange Online incident EX1550543.
Some of the phishing emails Microsoft detected on November 13 falsely claim that messages were held during the outage and will be deleted within 24 hours unless recipients click to restore them.
Observed subjects follow the pattern "Outage - [six-character code]," with sender display names using organization-specific prefixes followed by "Outage Notification" or "Service Health."
The campaign uses three sender domains, moments-notice[.]com, planetmaison[.]com, and newbooker[.]com, with recipient-specific SendGrid click-tracking links redirecting to reallifeaccounting[.]com, including the observed path /themelist0.html. Similar messages targeted organizations across multiple US sectors.
The activity is consistent with credential phishing, although credential collection and malware delivery have not been confirmed.
Security teams can use Microsoft Defender for Office 365 Threat Explorer and Microsoft Defender XDR advanced hunting (EmailEvents, EmailUrlInfo, and UrlClickEvents) to identify suspicious messages, examine embedded URLs, and investigate user clicks.
Microsoft Defender for Office 365 Safe Links provides time-of-click protection against malicious URLs when properly configured. Organizations should verify their Safe Links policies, investigate potential user interactions, and confirm service disruptions directly through the Microsoft 365 admin center.
‼️ North Korean hackers are cloning the faces and voices of founders and CEOs from their YouTube interviews and conference talks, and planting them in fake Zoom calls.
They build the fakes with mainstream AI tools such as Grok Imagine and GPT-4o.
US cybersecurity firm Arctic Wolf can see the hackers' own stash of fake videos and lures. It found 40 deepfakes there and 23 more it suspects.
The same files show the group, known as BlueNoroff, prepared lures against 677 people in 58 countries, 84% of them founders and executives.
Each person they hack is secretly filmed on webcam, and the footage feeds the next fake meeting.
‼️ Hackers hijacked telecom networks across Asia to intercept SMS 2FA codes and spy on mobile users.
A newly uncovered espionage group, SilentAir, compromised telecom equipment in at least 6 countries, targeting users primarily in Taiwan.
Here's how they pulled it off: https://t.co/63ohVVjslV
🚨 186 fake domains impersonate ChatGPT, Claude, Gemini and 24 other AI brands.
A mistyped URL can lead to fake security checks, malware downloads or Chrome extensions that hijack searches.
How the scheme works: https://t.co/x6q2YleMrZ
Ienāc Kiberzona un uzzini kā izvairīties no krāpniekiem. Kiberzona ir hobija projekts ar mērķi izglītot Latvijas iedzīvotājus, bez maksas. Iesaki arī saviem vecākiem. Ja tev patīk šis projekts, būsim pateicīgi, ja nošērosi šo ziņu tālāk :)
A massive, coordinated cyberattack is sweeping GitHub. Attackers are using thousands of compromised accounts and have attempted to push secret-stealing code to more than 66,000 public repositories, some of which belong to Fortune 100 and other major organizations, security researchers warn. https://t.co/MfNaYFJ3Xi
unleashed-firmware unlshd-095 — Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing. https://t.co/8n4f8woAGX
‼️Microsoft publicējis informāciju par kritisku ievainojamību CVE-2026-85844 (CVSS 9.8), kas skar Windows Kerberos autentifikācijas mehānismu.
Vairāk informācijas: https://t.co/qGjcp14PiP