
This is What a Worst-Case Scenario Breach Looks Like
Uber has been essentially completely compromised by a #cyberattack. Hackers used social engineering tactics (essentially, fake emails intended to get people to open bad links or attachments) to gain access to Uber's internal network, and eventually gained control of their entire Access Management system - the keys to the whole kingdom.
This hacker used fake emails - the type you see in your spam box every day - to cause a catastrophe at a huge company. If Uber survives this, which is no guarantee, they will be dealing with the fallout of this attack for years to come.
Many peoples' livelihoods will be lost or at least disrupted. There is a real human cost to these events, and because of negligence many people dependent on Uber will foot the bill.
Here are a few things SMBs can do to prevent these types of attacks on their own businesses:
1) #Phishing Protection and Training: Blocking fake emails and educating users on how to spot them strengthens the weakest link in any security plan - the employees themselves.
2) Multi-Factor Authentication (MFA): Passwords get compromised. It happens, as it did with Uber. When #MFA is enforced, a compromised password becomes an inconvenience instead of a catastrophe.
3) No Single Points of Failure: Building redundancy into your business technology means that when bad things happen, the effects can be mitigated and you are not at a risk of losing everything overnight.


