EILMELDUNGEN LIVE
YouTube Security VideosIBM Technology: AI Exposes Legacy Code(30.10.2026 um 17:00 Uhr)
•
YouTube Security VideosAndroid Police: Our phones feel so mid. #shorts #tech #ultra #phone(30.10.2026 um 16:45 Uhr)
•
Podcasts & Audio Briefings9to5Google: The Pixel 6 was a necessary disaster.(30.10.2026 um 16:45 Uhr)
•
YouTube Security VideosGoogle Workspace: Instantly Simplify your Google Sheets! 💡 #Shorts(30.10.2026 um 16:15 Uhr)
•
YouTube Security VideosMicrosoft Copilot: New accounting skills in Copilot in Excel(30.10.2026 um 16:00 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: Phishing-Resistant MFA with Conditional Access Authentication Strength(30.10.2026 um 15:45 Uhr)
•
YouTube Security VideosChrome for Developers: How to build safer WebMCP tools for AI agents(30.10.2026 um 17:06 Uhr)
•
YouTube Security VideosMicrosoft Developer: Customize your agent from a Chat Window?(30.10.2026 um 16:00 Uhr)
•
YouTube Security VideosMicrosoft Developer: Automation vs Physical AI(30.10.2026 um 16:41 Uhr)
•
Windows Tipps & SecurityAnnouncing new builds for 30 October 2026(30.10.2026 um 18:05 Uhr)
•
YouTube Security VideosIBM Technology: AI Exposes Legacy Code(30.10.2026 um 17:00 Uhr)
•
YouTube Security VideosAndroid Police: Our phones feel so mid. #shorts #tech #ultra #phone(30.10.2026 um 16:45 Uhr)
•
Podcasts & Audio Briefings9to5Google: The Pixel 6 was a necessary disaster.(30.10.2026 um 16:45 Uhr)
•
YouTube Security VideosGoogle Workspace: Instantly Simplify your Google Sheets! 💡 #Shorts(30.10.2026 um 16:15 Uhr)
•
YouTube Security VideosMicrosoft Copilot: New accounting skills in Copilot in Excel(30.10.2026 um 16:00 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: Phishing-Resistant MFA with Conditional Access Authentication Strength(30.10.2026 um 15:45 Uhr)
•
YouTube Security VideosChrome for Developers: How to build safer WebMCP tools for AI agents(30.10.2026 um 17:06 Uhr)
•
YouTube Security VideosMicrosoft Developer: Customize your agent from a Chat Window?(30.10.2026 um 16:00 Uhr)
•
YouTube Security VideosMicrosoft Developer: Automation vs Physical AI(30.10.2026 um 16:41 Uhr)
•
Windows Tipps & SecurityAnnouncing new builds for 30 October 2026(30.10.2026 um 18:05 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

zSecurity: How Uber Got Hacked (No 0-Day Required) 💀

Sicherheitslücken (CVE) zSecurity 1 Min. Lesezeit TA0001 · T1190
HD Video
How Uber Got Hacked (No 0-Day Required) 💀
Video abspielen

Beim Abspielen wird das Video von YouTube (Google Ireland Ltd.) geladen. Dabei werden Ihre IP-Adresse und weitere Daten an YouTube übertragen. Datenschutzerklärung

Video von zSecurity auf YouTube: Attackers didn't use an elite zero-day exploit to breach Uber. They just found valid access keys left behind in a GitHub…

Beitrag
0
Seite
0
↗ Quelle (zSecurity)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

Attackers didn't use an elite zero-day exploit to breach Uber. They just found valid access keys left behind in a GitHub repository and gained access to internal customer data. Sometimes the easiest way in is just finding the key!



Watch how to hunt for these buried secrets and how to prevent this from happening to you!



#ethicalhacking #cybersecurity #pentesting #bugbounty
🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
3 Knoten · 2 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

35 Quellen
CVE-2026-98432 Linux kernel IPv4 TCP flaw: status for CloudLinux
34 weitere Quellen
VulDB Updatesvor 4 Std.CVE-2024-38625 | Linux Kernel up to 6.6.32/6.9.3 ntfs3 null pointer dereference (6c8054d59066/ff1068929459/1cd6c96219c4) VulDB Updatesvor 4 Std.CVE-2024-38570 | Linux Kernel up to 6.6.32/6.8.11/6.9.2 gfs2 sd_dead_glocks use after free (Nessus ID 207818 / WID-SEC-2024-1418) VulDB Updatesvor 4 Std.CVE-2024-36968 | Linux Kernel up to 6.6.31/6.8.10/6.9.1 Bluetooth l2cap_le_flowctl_init buffer overflow (Nessus ID 212722) VulDB Updatesvor 4 Std.CVE-2024-36881 | Linux Kernel up to 6.6.30/6.8.9 userfaultfd close memory corruption (377f3a9a3d03/8d8b68a5b0c9/c88033efe9a3 / WID-SEC-2024-1259) VulDB Updatesvor 4 Std.CVE-2024-27041 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 amdgpu_dm_fini null pointer dereference (WID-SEC-2024-1008) VulDB Updatesvor 4 Std.CVE-2023-52653 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 SUNRPC gss_import_v2_context memory leak (Nessus ID 209785 / WID-SEC-2024-1008)
+28
8 Quellen
CVE-2026-95274 | Google Chrome up to 153.0.8010.52 DevTools cross site scripting (WID-SEC-2026-3514)
7 weitere Quellen
VulDB Updatesvor 4 Std.CVE-2026-95275 | Google Chrome up to 153.0.8010.52 MediaStream privileges management (WID-SEC-2026-3514) VulDB Updatesvor 4 Std.CVE-2026-95277 | Google Chrome up to 153.0.8010.52 Views use after free (WID-SEC-2026-3514) VulDB Updatesvor 4 Std.CVE-2026-95278 | Google Chrome up to 153.0.8010.52 WakeLock authorization (WID-SEC-2026-3514) VulDB Updatesvor 4 Std.CVE-2026-95276 | Google Chrome up to 153.0.8010.52 Themes input validation (WID-SEC-2026-3514) VulDB Updatesvor 4 Std.CVE-2026-95280 | Google Chrome up to 153.0.8010.52 V8 race condition (WID-SEC-2026-3514) VulDB Updatesvor 4 Std.CVE-2026-95279 | Google Chrome up to 153.0.8010.52 Omnibox clickjacking (WID-SEC-2026-3514)
+1

Mehr aus dieser Kategorie

CVE-2026-62911: Exchange-Logs in 12 Schritten prüfen - shattered.io
30.10.2026
CVE-2026-98432 Linux kernel IPv4 TCP flaw: status for CloudLinux
30.10.2026
CVE-2026-95274 | Google Chrome up to 153.0.8010.52 DevTools cross site scripting (WID-SEC-2026-3514)
30.10.2026
CVE-2026-95275 | Google Chrome up to 153.0.8010.52 MediaStream privileges management (WID-SEC-2026-3514)
30.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Zum Aktualisieren ziehen
TTS Reader • tsecurity.de Voice
Nächster Beitrag