Rivian adds 400-plus-mile battery option to R1T, R1S; $1.5B bond issue planned

<p>The EV startup is launching the "max pack" option for its electric pickup and crossover. Rivian reported 15,564 deliveries in the third quarter as manufacturing constraints ease.</p>

https://www.autonews.com/manufacturing/r...nge-option

Toyota EV battery deal calls for LG Energy to invest $3B in Michigan

<p>The two companies signed a supply agreement for lithium ion battery modules to use in Toyota's U.S.-assembled EVs.</p>

https://www.autonews.com/automakers-supp...-power-evs

Ford announces 400 more layoffs in Detroit area because of UAW strike

<p>Layoffs at Livonia Transmission and Sterling Axle near Detroit bring the total number of workers told to stay home since the strike began in mid-September to 1,330.</p>

https://www.autonews.com/manufacturing/u...lants-mich

EV maker VinFast reports $527 million quarterly loss as deliveries rise

<p>Deliveries of the company's EVs rose to about 9,500 in the three months through June.</p>

https://www.autonews.com/manufacturing/w...st-quarter

CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation, while removing five bugs from the list due to lack of adequate evidence.
The vulnerabilities newly added are below -

CVE-2023-42793 (CVSS score: 9.8) - JetBrains TeamCity Authentication Bypass Vulnerability

https://thehackernews.com/2023/10/cisa-w...on-of.html

GoldDigger Android Trojan Targets Banking Apps in Asia Pacific Countries

A new Android banking trojan named GoldDigger has been found targeting several financial applications with an aim to siphon victims' funds and backdoor infected devices.
"The malware targets more than 50 Vietnamese banking, e-wallet and crypto wallet applications," Group-IB said. "There are indications that this threat might be poised to extend its reach across the wider APAC region and to

https://thehackernews.com/2023/10/golddi...rgets.html

Guyana Governmental Entity Hit by DinodasRAT in Cyber Espionage Attack

A governmental entity in Guyana has been targeted as part of a cyber espionage campaign dubbed Operation Jacana.
The activity, which was detected by ESET in February 2023, entailed a spear-phishing attack that led to the deployment of a hitherto undocumented implant written in C++ called DinodasRAT.
The Slovak cybersecurity firm said it could link the intrusion to a known threat actor or group,

https://thehackernews.com/2023/10/guyana...it-by.html

Analysis and Config Extraction of Lu0Bot, a Node.js Malware with Considerable Capabi

Nowadays, more malware developers are using unconventional programming languages to bypass advanced detection systems. The Node.js malware Lu0Bot is a testament to this trend.
By targeting a platform-agnostic runtime environment common in modern web apps and employing multi-layer obfuscation, Lu0Bot is a serious threat to organizations and individuals.
Although currently, the malware has low

https://thehackernews.com/2023/10/analys...on-of.html

ForAllSecure Announces First Dynamic Software Bill of Materials for Application Secu



https://www.darkreading.com/application-...n-security

New Malwarebytes Survey: Consumers Lack Trust in New Tech



https://www.darkreading.com/application-...n-new-tech