New Volkswagen Golf R teased, debuts this summer

A revamped Golf R will show its face this summer. Volkswagen teased the upcoming hot hatch at the Ice Race in Zell am See, Austria. A camouflaged Golf R was on display at the event and VW said a debut will take place mid-2024. The teaser image reveals a sedate exterior that flies under the radar. Larger front intakes are opened to suck in more air...


https://www.motorauthority.com/news/1142...f-r-teased

Fisker, VinFast head to NADA looking for dealer partners

<p>The two newcomers are the first full-EV brands to pivot from the direct-sales model pioneered by Tesla to franchised dealers. VinFast has a few dealerships and Fisker expects its first in February.</p>

https://www.autonews.com/dealers/fisker-...alers-nada

Toyota global EV sales quadruple in 2023, still big gap with goal

<p>Toyota sold 104,018 EVs worldwide last year, but the automaker has a long way to go before it reaches its target of selling 1.5 million in 2026.</p>

https://www.autonews.com/automakers-supp...ll-elusive

VW founds AI lab, in talks with potential partners

<p>VW aims to generate early-stage prototypes in areas like AI-optimized charging cycles, predictive maintenance services and voice recognition.</p>

https://www.autonews.com/china/vw-founds...h-partners

New Glibc Flaw Grants Attackers Root Access on Major Linux Distros

Malicious local attackers can obtain full root access on Linux machines by taking advantage of a newly disclosed security flaw in the GNU C library (aka glibc).
Tracked as CVE-2023-6246, the heap-based buffer overflow vulnerability is rooted in glibc's __vsyslog_internal() function, which is used by syslog() and vsyslog() for system logging purposes. It's said to have been accidentally

https://thehackernews.com/2024/01/new-gl...-root.html

Hackers Exploiting Ivanti VPN Flaws to Deploy KrustyLoader Malware

A pair of recently disclosed zero-day flaws in Ivanti Connect Secure (ICS) virtual private network (VPN) devices have been exploited to deliver a Rust-based payload called KrustyLoader that's used to drop the open-source Sliver adversary simulation tool.
The security vulnerabilities, tracked as CVE-2023-46805 (CVSS score: 8.2) and CVE-2024-21887 (CVSS score: 9.1), could be abused

https://thehackernews.com/2024/01/chines...l-vpn.html

Italian Businesses Hit by Weaponized USBs Spreading Cryptojacking Malware

A financially motivated threat actor known as UNC4990 is leveraging weaponized USB devices as an initial infection vector to target organizations in Italy.
Google-owned Mandiant said the attacks single out multiple industries, including health, transportation, construction, and logistics.
"UNC4990 operations generally involve widespread USB infection followed by the deployment of the

https://thehackernews.com/2024/01/italia...nized.html

The SEC Won't Let CISOs Be: Understanding New SaaS Cybersecurity Rules

The SEC isn’t giving SaaS a free pass. Applicable public companies, known as “registrants,” are now subject to cyber incident disclosure and cybersecurity readiness requirements for data stored in SaaS systems, along with the 3rd and 4th party apps connected to them. 
The new cybersecurity mandates make no distinction between data exposed in a breach that was stored on-premise, in the

https://thehackernews.com/2024/01/the-se...nding.html

Telegram Marketplaces Fuel Phishing Attacks with Easy-to-Use Kits and Malware

Cybersecurity researchers are calling attention to the "democratization" of the phishing ecosystem owing to the emergence of Telegram as an epicenter for cybercrime, enabling threat actors to mount a mass attack for as little as $230.
"This messaging app has transformed into a bustling hub where seasoned cybercriminals and newcomers alike exchange illicit tools and insights creating a dark and

https://thehackernews.com/2024/01/telegr...shing.html

Alert: Ivanti Discloses 2 New Zero-Day Flaws, One Under Active Exploitation

Ivanti is alerting of two new high-severity flaws in its Connect Secure and Policy Secure products, one of which is said to have come under targeted exploitation in the wild.
The list of vulnerabilities is as follows -

CVE-2024-21888 (CVSS score: 8.8) - A privilege escalation vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows

https://thehackernews.com/2024/01/alert-...o-day.html