Tesla sued by U.S. civil rights agency for race discrimination at Calif. plant

<p>Equal Employment Opportunity Commission said in a lawsuit Tesla subjected Black workers “to severe or pervasive racial harassment” and alleged Tesla unfairly retaliated against workers who complained.</p>

https://www.autonews.com/automakers-supp...alif-plant

Threat Report: High Tech Industry targeted the most with 46% of attack traffic tagge

How To Use This Report

Enhance situational awareness of techniques used by threat actors
Identify potential attacks targeting your industry
Gain insights to help improve and accelerate your organization’s threat response

Summary of Findings
The Network Effect Threat Report offers insights based on unique data from Fastly’s Next-Gen WAF from Q2 2023 (April 1, 2023 to June 30, 2023). This report

https://thehackernews.com/2023/09/threat...ustry.html

GitHub Repositories Hit by Password-Stealing Commits Disguised as Dependabot Contrib

A new deceptive campaign has been observed hijacking GitHub accounts and committing malicious code disguised as Dependabot contributions with an aim to steal passwords from developers.
"The malicious code exfiltrates the GitHub project's defined secrets to a malicious C2 server and modify any existing javascript files in the attacked project with a web-form password-stealer malware code

https://thehackernews.com/2023/09/github...sword.html

Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts

Cisco is warning of attempted exploitation of a security flaw in its IOS Software and IOS XE Software that could permit an authenticated remote attacker to achieve remote code execution on affected systems.
The medium-severity vulnerability is tracked as CVE-2023-20109, and has a CVSS score of 6.6. It impacts all versions of the software that have the GDOI or G-IKEv2 protocol enabled.
The

https://thehackernews.com/2023/09/cisco-...s-and.html

Progress Software Releases Urgent Hotfixes for Multiple Security Flaws in WS_FTP Se

Progress Software has released hotfixes for a critical security vulnerability, alongside seven other flaws, in the WS_FTP Server Ad hoc Transfer Module and in the WS_FTP Server manager interface.
Tracked as CVE-2023-40044, the flaw has a CVSS score of 10.0, indicating maximum severity. All versions of the software are impacted by the flaw.
"In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a

https://thehackernews.com/2023/09/progre...rgent.html

Microsoft's AI-Powered Bing Chat Ads May Lead Users to Malware-Distributing Sites

Malicious ads served inside Microsoft Bing's artificial intelligence (AI) chatbot are being used to distribute malware when searching for popular tools.
The findings come from Malwarebytes, which revealed that unsuspecting users can be tricked into visiting booby-trapped sites and installing malware directly from Bing Chat conversations.
Introduced by Microsoft in February 2023, Bing Chat is an 

https://thehackernews.com/2023/09/micros...s-may.html

Johnson Controls International Disrupted by Major Cyberattack

The company filed with the SEC and is assessing its operations and financial damages.

https://www.darkreading.com/ics-ot/johns...are-attack

New Cisco IOS Zero-Day Delivers a Double Punch

The networking giant discloses new vulnerabilities the same day as warnings get issued that Cisco gear has been targeted in a Chinese APT attack.

https://www.darkreading.com/vulnerabilit...uble-punch

Chrome Flags Third Zero-Day This Month That's Tied to Spying Exploits

So far this year, Google has disclosed six vulnerabilities that attackers were actively exploiting before the company had a patch for them.

https://www.darkreading.com/vulnerabilit...g-exploits

A Preview of Windows 11's Passkeys Support

The latest update to Windows 11 introduces support for passkeys, which provide phishing-resistant passwordless authentication.

https://www.darkreading.com/dr-tech/a-pr...ys-support