The affordability crisis is here to stay, panelists say

<p>Industry experts talked interest rates, customer attitudes and financing in a panel on affordability at Automotive News Retail Forum: Chicago on Thursday.</p>

https://www.autonews.com/retail/problem-...elists-say

UAW submits new offer to GM as talks continue after Ford deal

<p>The union's latest proposal came a day after it reached a tentative agreement with Ford that would raise wages 25 percent over the next four years and reinstate cost-of-living adjustments.</p>

https://www.autonews.com/manufacturing/u...-new-offer

Staff-friendly time off among Bergstrom Automotive's employee support

<p>Bergstrom Automotive CEO Tim Bergstrom shared examples of how his Wisconsin-based dealership group has supported employee well-being during a keynote session at the Automotive News Retail Forum: Chicago.</p>

https://www.autonews.com/retail/time-amo...er-support

GM's Cruise pauses driverless operations across all fleets

<p>"This isn't related to any new on-road incidents, and supervised AV operations will continue," Cruise said in a post on X, formerly known as Twitter.</p>

https://www.autonews.com/mobility-report...operations

Audi Bedford wins 2023 Best Dealerships To Work For

<p>Audi Bedford, a luxury dealership in Ohio, took home overall top honors and also was the large dealership category winner in Automotive News’ 2023 Best Dealerships To Work For program.</p>

https://www.autonews.com/best-dealership...di-bedford

YoroTrooper: Researchers Warn of Kazakhstan's Stealthy Cyber Espionage Group

A relatively new threat actor known as YoroTrooper is likely made up of operators originating from Kazakhstan.
The assessment, which comes from Cisco Talos, is based on their fluency in Kazakh and Russian, use of Tenge to pay for operating infrastructure, and very limited targeting of Kazakhstani entities, barring the government's Anti-Corruption Agency.
"YoroTrooper attempts to obfuscate the

https://thehackernews.com/2023/10/yorotr...rn-of.html

Iranian Group Tortoiseshell Launches New Wave of IMAPLoader Malware Attacks

The Iranian threat actor known as Tortoiseshell has been attributed to a new wave of watering hole attacks that are designed to deploy a malware dubbed IMAPLoader.
"IMAPLoader is a .NET malware that has the ability to fingerprint victim systems using native Windows utilities and acts as a downloader for further payloads," the PwC Threat Intelligence team said in a Wednesday analysis.
"It uses

https://thehackernews.com/2023/10/irania...nches.html

Record-Breaking 100 Million RPS DDoS Attack Exploits HTTP/2 Rapid Reset Flaw

Cloudflare on Thursday said it mitigated thousands of hyper-volumetric HTTP distributed denial-of-service (DDoS) attacks that exploited a recently disclosed flaw called HTTP/2 Rapid Reset, 89 of which exceeded 100 million requests per second (RPS).
"The campaign contributed to an overall increase of 65% in HTTP DDoS attack traffic in Q3 compared to the previous quarter," the web infrastructure

https://thehackernews.com/2023/10/record...-ddos.html

Microsoft Warns as Scattered Spider Expands from SIM Swaps to Ransomware

The prolific threat actor known as Scattered Spider has been observed impersonating newly hired employees in targeted firms as a ploy to blend into normal on-hire processes and takeover accounts and breach organizations across the world.
Microsoft, which disclosed the activities of the financially motivated hacking crew, described the adversary as "one of the most dangerous financial criminal

https://thehackernews.com/2023/10/micros...pider.html

iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs

A group of academics has devised a novel side-channel attack dubbed iLeakage that exploits a weakness in the A- and M-series CPUs running on Apple iOS, iPadOS, and macOS devices, enabling the extraction of sensitive information from the Safari web browser.
"An attacker can induce Safari to render an arbitrary webpage, subsequently recovering sensitive information present within it using

https://thehackernews.com/2023/10/ileaka...pacts.html