Prompt-Bomb Uber Hack

**Executive summary:** The article describes an Uber breach where an attacker used MFA prompt bombing and social-engineering (impersonating IT via WhatsApp and smishing) to gain employee access, pivot through shared network resources and OneLogin, and obtain plaintext credentials for the organization's privileged access management solution; it emphasizes the tactic (MFA fatigue), the risk of poor credential handling, and recommends continuous security awareness training, managed risk, and MDR to reduce exposure.