How Ethical Hackers Are Helping Security Leaders Navigate the Budget Crunch

Security leaders are using ethical hackers to help address strains and challenges in their security programs.


https://www.hackerone.com/vulnerability-...iso-budget

VDPs Are Good For the Government — and Good For Business

Congress recently introduced the Federal Cybersecurity Vulnerability Reduction Act.


https://www.hackerone.com/security-compl...actors-vdp

BMW to make $750M U.K. investment in electric Mini output

<p>BMW's investment will help offset a number of setbacks the U.K. has had in electrification, such as the collapse of the Britishvolt battery company.</p>

https://www.autonews.com/manufacturing/b...production

Tesla supercomputer likely to boost stock price, Morgan Stanley predicts

<p>The Dojo supercomputer can open up new addressable markets that "extend well beyond selling vehicles at a fixed price," said Morgan Stanley analysts, led by Adam Jonas.</p>

https://www.autonews.com/mobility-report...an-stanley

Despite uncertainty, supplier spending surges to meet EV, AV demand

<p>Suppliers such as Hyundai Mobis, Denso, Magna and Robert Bosch are among those to have recently announced major investments in their manufacturing and R&D capabilities.</p>

https://www.autonews.com/suppliers/ev-se...nvestments

Google Chrome Rolls Out Support for 'Privacy Sandbox' to Bid Farewell to Tracking Co

Google has officially begun its rollout of Privacy Sandbox in the Chrome web browser to a majority of its users, nearly four months after it announced the plans.
"We believe it is vital to both improve privacy and preserve access to information, whether it's news, a how-to-guide, or a fun video," Anthony Chavez, vice president of Privacy Sandbox initiatives at Google, said.
"Without viable

https://thehackernews.com/2023/09/google...t-for.html

How to Prevent API Breaches: A Guide to Robust Security

With the growing reliance on web applications and digital platforms, the use of application programming interfaces (APIs) has become increasingly popular. If you aren’t familiar with the term, APIs allow applications to communicate with each other and they play a vital role in modern software development.
However, the rise of API use has also led to an increase in the number of API breaches.

https://thehackernews.com/2023/09/how-to...de-to.html

Charming Kitten's New Backdoor 'Sponsor' Targets Brazil, Israel, and U.A.E.

The Iranian threat actor known as Charming Kitten has been linked to a new wave of attacks targeting different entities in Brazil, Israel, and the U.A.E. using a previously undocumented backdoor named Sponsor.
Slovak cybersecurity firm is tracking the cluster under the name Ballistic Bobcat. Victimology patterns suggest that the group primarily singles out education, government, and healthcare

https://thehackernews.com/2023/09/charmi...onsor.html

Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger

A new phishing attack is leveraging Facebook Messenger to propagate messages with malicious attachments from a "swarm of fake and hijacked personal accounts" with the ultimate goal of taking over the targets' accounts.
"Originating yet again from a Vietnamese-based group, this campaign uses a tiny compressed file attachment that packs a powerful Python-based stealer dropped in a multi-stage

https://thehackernews.com/2023/09/vietna...based.html

Zero-Day Alert: Latest Android Patch Update Includes Fix for Newly Actively Exploite

Google has rolled out monthly security patches for Android to address a number of flaws, including a zero-day bug that it said may have been exploited in the wild.
Tracked as CVE-2023-35674, the high-severity vulnerability is described as a case of privilege escalation impacting the Android Framework.
“There are indications that CVE-2023-35674 may be under limited, targeted exploitation,” the

https://thehackernews.com/2023/09/zero-d...patch.html