{"id":40256,"date":"2021-04-01T04:58:56","date_gmt":"2021-04-01T04:58:56","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/"},"modified":"2021-04-01T04:58:56","modified_gmt":"2021-04-01T04:58:56","slug":"wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/","title":{"rendered":"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges"},"content":{"rendered":"<p>Wi-Fi kit-slinger Ubiquiti has suggested the attacker that accessed some of its cloud-hosted systems in January 2021 may have made off with source code and employee logins, not the customer data it initially warned could be in peril.<\/p>\n<p>News that Ubiquiti\u2019s cloud servers had been breached <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/01\/12\/ubiquiti_data_leak\/\" rel=\"noopener noreferrer\">emerged<\/a> on January 11, 2021, when the company emailed customers the text found in this <a target=\"_blank\" href=\"https:\/\/community.ui.com\/questions\/Account-Notification\/96467115-49b5-4dd6-9517-f8cdbf6906f3\" rel=\"noopener noreferrer\">support forum post<\/a>. That missive stated: \u201cWe recently became aware of unauthorized access to certain of our information technology systems hosted by a third-party cloud provider.\u201d<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"condor\" data-xsm=\",button,mpu,\" data-sm=\",button,mpu,\" data-md=\",button,banner_plus,mpu\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" target=\"_blank\" rel=\"noopener noreferrer\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>That announcement continued, \u201cWe have no indication that there has been unauthorized activity with respect to any user\u2019s account,\u201d but also recommended customers change their passwords because if their records had been accessed, hashed and salted passwords, email addresses, and even physical addresses and phone numbers could be at risk.<\/p>\n<p>An <a target=\"_blank\" href=\"https:\/\/community.ui.com\/questions\/Update-to-January-2021-Account-Notification\/3813e6f4-b023-4d62-9e10-1035dc51ad2e\" rel=\"noopener noreferrer\">update<\/a> on Wednesday this week stated an investigation by outside experts \u201cidentified no evidence that customer information was accessed, or even targeted,\u201d however.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"mid\" data-raptor=\"eagle\" data-xsm=\",button,mpu_plusplus,\" data-sm=\",button,mpu_plusplus,\" data-md=\",button,mpu_plusplus,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener noreferrer\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>Crucially, the update also revealed that someone \u201cunsuccessfully attempted to extort the company by threatening to release stolen source code and specific IT credentials.\u201d The update does not suggest the extortion attempt was fanciful.<\/p>\n<p>Ubiquiti has not said when the external experts decided customer data was untouched. Which leaves the company in the interesting position of perhaps knowing its core IP has leaked, and not disclosing that, while also knowing that customer data is safe and not disclosing that, either.<\/p>\n<p>The update contains another scary nugget in this sentence: \u201cPlease note that nothing has changed with respect to our analysis of customer data and the security of our products since our notification on January 11.\u201d<\/p>\n<p>But the January 11 notification makes no mention of \u201cthe security of our products.\u201d<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2019\/11\/07\/shutterstock_shrug.jpg?x=174&amp;amp;y=115&amp;amp;crop=1\" width=\"174\" height=\"115\" alt=\"Someone shrugging\"><\/p>\n<h2 title=\"You didn't ask for it, we didn't tell you about it, but hey, it clears GDPR so what you gonna do?\">Sure, we made your Wi-Fi routers phone home with telemetry, says Ubiquiti. What of it?<\/h2>\n<p><a href=\"https:\/\/www.theregister.com\/2019\/11\/07\/ubiquiti_networks_phone_home\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>The update on Wednesday was published two days after <i>Krebs On Security<\/i> <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/krebsonsecurity.com\/2021\/03\/whistleblower-ubiquiti-breach-catastrophic\/\">reported<\/a> that it has seen a letter from a whistleblower to the European Data Protection Supervisor that alleges Ubiquiti has not told the whole truth about the incident.<\/p>\n<p><i>Krebs<\/i> said the letter described the attack on Ubiquiti as \u201ccatastrophically worse than reported.\u201d<\/p>\n<p>\u201cThe breach was massive, customer data was at risk, access to customers\u2019 devices deployed in corporations and homes around the world was at risk,\u201d the letter reportedly claimed, adding that Ubiquiti\u2019s legal team \u201csilenced and overruled efforts to decisively protect customers.\u201d<\/p>\n<p>The whistleblower separately claimed that whoever was able to break into Ubiquiti&#8217;s Amazon-hosted servers, they could have swiped cryptographic secrets for customers&#8217; single sign-on cookies and remote device access, internal source code, and signing keys \u2013 far more than the Wi-Fi box maker disclosed in January. The intruder, it is said, obtained a Ubiquiti IT worker&#8217;s privileged credentials, got root access to the business&#8217;s AWS systems, and thus had a potential free run of its cloud-hosted storage and databases.<\/p>\n<p>Backdoors were apparently stashed in the servers, too, and, as Ubiquiti acknowledged this week, a ransom was demanded to keep quiet about the break-in.<\/p>\n<p>If Ubiquiti staff credentials were obtained, as even Ubiquiti itself now suggests, the attackers could have comfortably gained \u201caccess to customers\u2019 devices deployed in corporations and homes around the world,\u201d as the whistleblower&#8217;s letter put it.<\/p>\n<p>The right creds would also put customer data at risk, even if the attackers had not \u201caccessed, or even targeted\u201d such data as Ubiquiti\u2019s statement this week stated.<\/p>\n<p>The post on Wednesday went on: \u201cAt this point, we have well-developed evidence that the perpetrator is an individual with intricate knowledge of our cloud infrastructure,\u201d but said it can\u2019t say more due to ongoing investigations.<\/p>\n<p>To summarize: source code for Ubiquiti products and other internal info may have been exfiltrated, servers may have been rooted, and whoever&#8217;s responsible may be a current or former employee of the company&#8230; yet other than with a few stray words, Ubiquiti has chosen to focus on a personal privacy issue it says is not a problem.<\/p>\n<p>And that all happened at a time we know that bad actors were able to hide their presence within SolarWinds&#8217; infrastructure for years, and poison its products.<\/p>\n<p>The update ends with another call for customers to refresh their passwords and enable two-factor authentication. <i>The Register<\/i> fancies some readers may also consider refreshing their Wi-Fi supplier. \u00ae<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xsm=\",button,dbutton,mpu_plus,dmpu,\" data-sm=\",button,dbutton,mpu_plus,dmpu,\" data-md=\",button,dbutton,mpu_plus,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener noreferrer\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p> <i><b>PS:<\/b> It&#8217;s not been a great week for Ubiquiti: it just <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/twitter.com\/Ubiquiti\/status\/1376903242404139009\">promised<\/a> to remove house ads it added to the web-based user interface of its UniFi gear.<\/i>\n<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2021\/04\/01\/ubiquiti_data_breach\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Says customer data wasn&#8217;t touched, doesn&#8217;t say much about being rooted Wi-Fi kit-slinger Ubiquiti has suggested the attacker that accessed some of its cloud-hosted systems in January 2021 may have made off with source code and employee logins, not the customer data it initially warned could be in peril.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-40256","post","type-post","status-publish","format-standard","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-01T04:58:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges\",\"datePublished\":\"2021-04-01T04:58:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/\"},\"wordCount\":767,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/\",\"name\":\"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"datePublished\":\"2021-04-01T04:58:56+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"contentUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/","og_locale":"en_US","og_type":"article","og_title":"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-04-01T04:58:56+00:00","og_image":[{"url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges","datePublished":"2021-04-01T04:58:56+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/"},"wordCount":767,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/","url":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/","name":"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","datePublished":"2021-04-01T04:58:56+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/#primaryimage","url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","contentUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGXUmh7Z3ghFDzD3KlGJ-AAAAAE&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/wi-fi-slinger-ubiquiti-hints-at-source-code-leak-after-claim-of-catastrophic-cloud-intrusion-emerges\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Wi-Fi slinger Ubiquiti hints at source code leak after claim of \u2018catastrophic\u2019 cloud intrusion emerges"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/40256","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=40256"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/40256\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=40256"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=40256"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=40256"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}