EV startup Fisker receives noncompliance notice from NYSE

<p>Fisker, which makes the Ocean electric crossover, said the notice would not lead to an immediate delisting from the stock exchange, adding it has six months to regain compliance.</p>

https://www.autonews.com/automakers-supp...otice-nyse

Worker death forces Subaru to suspend output in Japan

<p>A worker’s death in Japan spurred Subaru to temporarily halt production at three plants, including two that make popular nameplates for export to the U.S.</p>

https://www.autonews.com/automakers-supp...ed-crushed

Audi union in Mexico agrees to salary hike, ending strike

<p>The vote passed with 66.3 percent of employees backing the raise, Mexico's labor ministry said.</p>

https://www.autonews.com/automakers-supp...ing-strike

VW ID.7 Tourer electric wagon debuts, US sales still pending

Volkswagen only just launched its 2025 ID.7 hatchback, but a new body style for the electric midsizer has just been added. It's a wagon that VW calls the ID.7 Tourer, and there's a chance it will be offered in the U.S. The ID.7 hatch is VW's Tesla Model S rival, and is slated to reach dealerships later this year as a 2025 model. It will help fill...


https://www.motorauthority.com/news/1142...r-revealed

WordPress Bricks Theme Under Active Attack: Critical Flaw Impacts 25,000+ Sites

A critical security flaw in the Bricks theme for WordPress is being actively exploited by threat actors to run arbitrary PHP code on susceptible installations.
The flaw, tracked as CVE-2024-25600 (CVSS score: 9.8), enables unauthenticated attackers to achieve remote code execution. It impacts all versions of the Bricks up to and including 1.9.6.
It has been addressed by the theme developers in&

https://thehackernews.com/2024/02/wordpr...ctive.html

Critical Flaws Found in ConnectWise ScreenConnect Software - Patch Now

ConnectWise has released software updates to address two security flaws in its ScreenConnect remote desktop and access software, including a critical bug that could enable remote code execution on affected systems.
The vulnerabilities, which currently lack CVE identifiers, are listed below -

Authentication bypass using an alternate path or channel (CVSS score: 10.0)
Improper limitation of

https://thehackernews.com/2024/02/critic...twise.html

Learn How to Build an Incident Response Playbook Against Scattered Spider in Real-Ti

In the tumultuous landscape of cybersecurity, the year 2023 left an indelible mark with the brazen exploits of the Scattered Spider threat group. Their attacks targeted the nerve centers of major financial and insurance institutions, culminating in what stands as one of the most impactful ransomware assaults in recent memory. 
When organizations have no response plan in place for such an

https://thehackernews.com/2024/02/learn-...ponse.html

SaaS Compliance through the NIST Cybersecurity Framework

The US National Institute of Standards and Technology (NIST) cybersecurity framework is one of the world's most important guidelines for securing networks. It can be applied to any number of applications, including SaaS. 
One of the challenges facing those tasked with securing SaaS applications is the different settings found in each application. It makes it difficult to develop a

https://thehackernews.com/2024/02/saas-c...-nist.html

New Report Reveals North Korean Hackers Targeting Defense Firms Worldwide

North Korean state-sponsored threat actors have been attributed to a cyber espionage campaign targeting the defense sector across the world.
In a joint advisory published by Germany's Federal Office for the Protection of the Constitution (BfV) and South Korea's National Intelligence Service (NIS), the agencies said the goal of the attacks is to plunder advanced defense technologies in a "

https://thehackernews.com/2024/02/new-re...ckers.html

LockBit Ransomware Operation Shut Down; Criminals Arrested; Decryption Keys Released

The U.K. National Crime Agency (NCA) on Tuesday confirmed that it obtained LockBit's source code as well as intelligence pertaining to its activities and their affiliates as part of a dedicated task force called Operation Cronos.
"Some of the data on LockBit's systems belonged to victims who had paid a ransom to the threat actors, evidencing that even when a ransom is paid, it does not

https://thehackernews.com/2024/02/lockbi...-down.html