Uber’s 2022 Hack: A Bought Password, a Flood of Pushes, and vSphere
An 18-year-old bought a contractor’s Uber password, bombarded them with MFA pushes until one was approved, then roamed to vSphere via hardcoded credentials.
LAPSUS$ Convictions: Teenagers, Helpdesks, and the GTA VI Leak
A London jury convicted the teenage LAPSUS$ hackers whose SIM swaps, MFA-fatigue pushes, and helpdesk manipulation breached Nvidia, Microsoft, Okta, Uber, and Rockstar — closing the criminal case that proved identity is the real perimeter.
Reddit’s Phishing Breach: When MFA Codes Get Phished Too
A cloned intranet page harvested an employee’s password and MFA code, opening hours of internal access. Phishing-resistant MFA and self-report lessons.
Lapsus$ Rising: Identity-Driven Extortion’s Breakout
No zero-days, no malware — just MFA fatigue, SIM swaps, and help-desk social engineering. How Lapsus$ broke every assumption.