Cooke to succeed Templin as CEO of Toyota Financial Services

<p>Scott Cooke will become CEO of Toyota Financial Services, the nation's largest captive auto lender, effective Jan. 2, succeeding Mark Templin in the role.</p>

https://www.autonews.com/finance-insuran...-financial

McLaren pivots to customer order-based allocations for stores

<p>McLaren said that an order-based allocation model creates supply flexibility, drives retailer profitability and rewards good customer experience.</p>

https://www.autonews.com/dealers/mclaren...del-stores

General Motors CEO: Anti-drunken driving tech is coming

<p>GM CEO Mary Barra's remarks come a day after NHTSA took the first regulatory step toward mandating alcohol-impairment detection technology in all new light-duty cars and trucks.</p>

https://www.autonews.com/executives/gm-c...d-everyone

Michigan governor proposes union-friendly rebates for new vehicle purchases

<p>LANSING — <strong><a href="http://autonews.com/topic/michigan" target="_blank">Michigan</a></strong> Gov. Gretchen Whitmer said Wednesday she will ask lawmakers to approve a $25 million tax rebate program to boost vehicle sales in Michigan, particularly of electric- or hybrid-powered cars and trucks made in <strong><a href="http://autonews.com/topic/uaw" target="_blank">unionized plants</a></strong>.</p>

<p>The Democratic governor will call for the funding in her January State of the State speech. She <a href="https://www.crainsdetroit.com/government/michigan-state-state-address-5-whitmers-key-points" target="_blank">outlined a different EV rebate proposal</a> in her 2022 address and a sales tax break on EV purchases in her 2023 speech. Neither became law.</p>

<p>Under the latest plan, the following rebates would be applied to the final price of a new vehicle:</p>

<ul>
<li>$2,500 on a battery electric or hybrid manufactured in a unionized factory;</li>
<li>$2,000 on an electric or hybrid made in a nonunionized facility;</li>
<li>$1,500 on a gas-powered vehicle in a unionized plant; and</li>
<li>$1,000 on a combustion vehicle in a nonunionized factory.</li>
</ul><p>"MI Vehicle Rebate will save you money on your new car as you walk out of the dealership with your keys," Whitmer said in a statement. "Michigan’s auto industry is the backbone of our economy, and this year, the hardworking men and women of the UAW and our world-leading automakers negotiated and ratified a record contract. Now, let’s keep making the world’s best cars and trucks while lowering costs for families by thousands of dollars. Together, we will build and lead the future of mobility and electrification." </p>

<p>Used vehicle purchases would be ineligible for the rebate, which would last until the $25 million is gone. The $25 million would cover between 10,000 and 25,000 vehicles, roughly the number of new vehicles that are sold in Michigan in a week or two.</p>

<p>Combined with a $7,500 federal credit, Whitmer said, residents could get up to $10,000 off the price of certain EVs or hybrids. The dealer would get a tax rebate voucher from the state Department of Treasury and subtract that amount from the final price.</p>

<p>The governor's office released supportive statements from the Michigan Automobile Dealer Association; MICHauto, an initiative of the Detroit Regional Chamber; and the BlueGreen Alliance, a partnership of unions and environmental groups. Her push came as EV growth is starting to slow and fall short of the auto industry's lofty ambitions to transition away from combustion engines.</p>

<p>The Biden administration recently proposed new rules that would limit EV buyers from claiming the full tax credit if they purchase cars containing battery materials from China and other countries that are considered hostile to the U.S.</p>

<p>— <em>The Associated Press contributed.</em></p>

<p> </p>

https://www.autonews.com/retail/michigan...-purchases

Researchers Unmask Sandman APT's Hidden Link to China-Based KEYPLUG Backdoor

Tactical and targeting overlaps have been discovered between the enigmatic advanced persistent threat (APT) called Sandman and a China-based threat cluster that's known to use a backdoor referred to as KEYPLUG.
The assessment comes jointly from SentinelOne, PwC, and the Microsoft Threat Intelligence team based on the fact that the adversary's Lua-based malware LuaDream and KEYPLUG have

https://thehackernews.com/2023/12/resear...idden.html

Major Cyber Attack Paralyzes Kyivstar - Ukraine's Largest Telecom Operator

Ukraine's biggest telecom operator Kyivstar has become the victim of a "powerful hacker attack,” disrupting customer access to mobile and internet services.
"The cyberattack on Ukraine's #Kyivstar telecoms operator has impacted all regions of the country with high impact to the capital, metrics show, with knock-on impacts reported to air raid alert network and banking sector as

https://thehackernews.com/2023/12/major-...vstar.html

Microsoft Warns of Hackers Exploiting OAuth for Cryptocurrency Mining and Phishing

Microsoft has warned that adversaries are using OAuth applications as an automation tool to deploy virtual machines (VMs) for cryptocurrency mining and launch phishing attacks.
"Threat actors compromise user accounts to create, modify, and grant high privileges to OAuth applications that they can misuse to hide malicious activity," the Microsoft Threat Intelligence team said in an

https://thehackernews.com/2023/12/micros...iting.html

How to Analyze Malware’s Network Traffic in A Sandbox

Malware analysis encompasses a broad range of activities, including examining the malware's network traffic. To be effective at it, it's crucial to understand the common challenges and how to overcome them. Here are three prevalent issues you may encounter and the tools you'll need to address them.
Decrypting HTTPS traffic
Hypertext Transfer Protocol Secure (HTTPS), the protocol for secure

https://thehackernews.com/2023/12/how-to...affic.html

Google Using Clang Sanitizers to Protect Android Against Cellular Baseband Vulnerabi

Google is highlighting the role played by Clang sanitizers in hardening the security of the cellular baseband in the Android operating system and preventing specific kinds of vulnerabilities.
This comprises Integer Overflow Sanitizer (IntSan) and BoundsSanitizer (BoundSan), both of which are part of UndefinedBehaviorSanitizer (UBSan), a tool designed to catch various kinds of

https://thehackernews.com/2023/12/google...rs-to.html

BazaCall Phishing Scammers Now Leveraging Google Forms for Deception

The threat actors behind the BazaCall call back phishing attacks have been observed leveraging Google Forms to lend the scheme a veneer of credibility.
The method is an "attempt to elevate the perceived authenticity of the initial malicious emails," cybersecurity firm Abnormal Security said in a report published today.
BazaCall (aka BazarCall), which was first

https://thehackernews.com/2023/12/bazaca...s-now.html