Skip to content
October 16, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Uber secret system can remotely shut down the devices to obstruct the police
  • News

Uber secret system can remotely shut down the devices to obstruct the police

Do Son January 12, 2018 2 minutes read
Add Daily CyberSecurity as a preferred source on Google

According to “Bloomberg”, January 12 reported that in order to obstruct the police raid, taxi application Uber allegedly used the secret system, Ripley, remote shutdown of the computer. From spring 2015 to the end of 2016, Uber has used the system as a regular tool and has used it more than 20 times in offices in Canada, Brussels, and Hong Kong.

In May 2015, 10 investigators from the Revenue Agency of Quebec in Canada raided Uber’s Montreal office. The Quebec Revenue Agency believes Uber violated tax laws and held a search warrant for the collection of evidence.

Informed sources said the presence of Uber manager “unruffled.” Like Uber’s managers in hundreds of offices overseas, they have been trained to know that they need to send a number to warn Uber San Francisco headquarters specially trained staff. When the news was received, Uber staff in San Francisco headquarters quickly and quickly canceled every computer in the Montreal office, leaving the Quebec tax office with almost impossible access to company computer records. In the end, the investigators did not collect any evidence and can only leave.

Image: pcmag

Reported that Uber’s ability to remotely lock the device is not limited to the computer. The team at Uber headquarters responsible for the Ripley system can also remotely change passwords and other information, lock down data on the company’s smartphones, laptops, and desktops, and shut down devices.

Uber said the Ripley system – named after a character in an “Alien” movie that can launch a self-destructing program – is designed to protect user data. “As with every company with offices around the world, we have set up security procedures to protect business and user data and when the government conducts investigations, our policy is to cooperate with all legitimate searches and data requests,” Uber said.

However, some employees believe the system will delay judicial investigations. One scholar said the use of Ripley may hinder the administration of justice. Uber allegedly also considered developing a system called uLocker that uses a fake login interface to trick law enforcement officers.

A year after hiding a security breach affecting 57 million users, former Uber Global Intelligence Manager accused him of carrying out illegal activities such as wiretapping and bribery. Currently, Uber disputes with the London Transport Agency, who believe Uber poses a threat to safety and security.

Reference: Bloomberg

Related coverage

  • Angular SSR Flaw (CVE-2025-59052) Exposes User Data: What Developers Need to Know
  • Beware: Hackers Use Google Drawings & WhatsApp Links to Steal Data
  • The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal
  • Webmin 2.641 Fixes Three Vulnerabilities Including a Critical Auth Bypass
  • AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2
  • Operation Covert Access: Rust RAT Infiltrates Argentina’s Judiciary
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our zero-day alerts and CVE reports helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Tags: Uber secret system

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2026-21589CVSS 9.3
    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software...
    CISA KEV📅 Added to KEV: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-101954CVSS 9.3
    An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos...
    📅 Updated: Oct 16, 2026
  • CVE-2026-101982CVSS 9.3
    A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos...
    📅 Updated: Oct 16, 2026
  • CVE-2026-102175CVSS 9.3
    A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS...
    📅 Updated: Oct 16, 2026
  • CVE-2026-102031CVSS 9.3
    An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user...
    📅 Updated: Oct 16, 2026
  • CVE-2026-101990CVSS 9.3
    A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos...
    📅 Updated: Oct 16, 2026
  • CVE-2026-101955CVSS 9.2
    A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series...
    📅 Updated: Oct 16, 2026
  • CVE-2026-101997CVSS 9.2
    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper...
    📅 Updated: Oct 16, 2026
  • CVE-2026-111444CVSS 9.8
    Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies...
    📅 Updated: Oct 16, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.