Uber Hack: Get RID Of ALL Your Admin Static Creds
Lessons learned from last week's Uber hack
That’s it, no post right now.
My tips this week are:
Get rid of all your static admin creds
Add step up authentication for all admin ACTIONS
Add adaptive MFA to your authentication to detect abnormal MFA activity
Have admin users use SEPARATE credentials for everyday access vs Admin Access
Here’s an excellent video by Marcus to help illustrate: