Magna Q4 earnings surge despite UAW, EV production headwinds

<p>Magna International Inc., the largest North American parts supplier, on Friday said its fourth-quarter net income surged 185 percent to $271 million from a year earlier thanks to steadier global new-vehicle production.</p>

https://www.autonews.com/suppliers/magna...es-impacts

Asbury 4-store Tekion DMS pilot could precede companywide switch by 2026

<p>A successful four-store pilot of Tekion later this year could lead to Asbury Automotive Group Inc. deploying the dealership management system companywide in 2025 and finishing the DMS switch in early 2026, Asbury CEO David Hultsaid this week.</p>

https://www.autonews.com/dealers/asbury-...witch-2026

Some dealership buy-sell brokers predict record Q1 amid robust deal pace

<p>Alan Haig, president of buy-sell firm Haig Partners, in Fort Lauderdale, Fla., told that his firm expects to close deals on 31 stores this quarter, and he has a bullish outlook for 2024.</p>

https://www.autonews.com/dealers/car-dea...heir-firms

VW Arteon dropped earlier than planned, no 2024 model

Volkswagen's Arteon hatchback has been dropped from the U.S. market, one year earlier than planned. VW last June said it planned to drop niche models like the Arteon in an attempt to improve efficiency of its operations and in turn boost profits. The automaker said at the time the Arteon would be continued to be offered in the U.S. through the...


https://www.motorauthority.com/news/1142...2024-model

Stealthy Zardoor Backdoor Targets Saudi Islamic Charity Organization

An unnamed Islamic non-profit organization in Saudi Arabia has been targeted as part of a stealthy cyber espionage campaign designed to drop a previously undocumented backdoor called Zardoor.
Cisco Talos, which discovered the activity in May 2023, said the campaign has likely persisted since at least March 2021, adding it has identified only one compromised target to date, although it's

https://thehackernews.com/2024/02/stealt...saudi.html

Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways

Ivanti has alerted customers of yet another high-severity security flaw in its Connect Secure, Policy Secure, and ZTA gateway devices that could allow attackers to bypass authentication.
The issue, tracked as CVE-2024-22024, is rated 8.3 out of 10 on the CVSS scoring system.
"An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti

https://thehackernews.com/2024/02/warnin...-flaw.html

Wazuh in the Cloud Era: Navigating the Challenges of Cybersecurity

Cloud computing has innovated how organizations operate and manage IT operations, such as data storage, application deployment, networking, and overall resource management. The cloud offers scalability, adaptability, and accessibility, enabling businesses to achieve sustainable growth. However, adopting cloud technologies into your infrastructure presents various cybersecurity risks and

https://thehackernews.com/2024/02/wazuh-...ating.html

Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation

Fortinet has disclosed a new critical security flaw in FortiOS SSL VPN that it said is likely being exploited in the wild.
The vulnerability, CVE-2024-21762 (CVSS score: 9.6), allows for the execution of arbitrary code and commands.
"An out-of-bounds write vulnerability [CWE-787] in FortiOS may allow a remote unauthenticated attacker to execute arbitrary code or command via specially

https://thehackernews.com/2024/02/fortin...s-ssl.html

New Coyote Trojan Targets 61 Brazilian Banks with Nim-Powered Attack

Sixty-one banking institutions, all of them originating from Brazil, are the target of a new banking trojan called Coyote.
"This malware utilizes the Squirrel installer for distribution, leveraging Node.js and a relatively new multi-platform programming language called Nim as a loader to complete its infection," Russian cybersecurity firm Kaspersky said in a Thursday report.
What

https://thehackernews.com/2024/02/new-co...ilian.html

Hands-on Review: Myrror Security Code-Aware and Attack-Aware SCA

Introduction
The modern software supply chain represents an ever-evolving threat landscape, with each package added to the manifest introducing new attack vectors. To meet industry requirements, organizations must maintain a fast-paced development process while staying up-to-date with the latest security patches. However, in practice, developers often face a large amount of security work

https://thehackernews.com/2024/02/hands-...-code.html