Fiat names new North American chief

<p>Aamir Ahmed, 39, who worked in marketing for Fiat Chrysler before going to Amazon and Harman International, is the new leader of a brand that has struggled to gain traction since returning to North America in 2011.</p>

https://www.autonews.com/executives/stel...th-america

Automakers ask court to block June 1 enforcement of Mass. updated right-to-repair law

<p>The action comes after state Attorney General Andrea Campbell said in a March filing that terminating her office's nonenforcement stipulation was "in the public interest" and would take effect at the start of June.</p>

https://www.autonews.com/service/automak...repair-law

Volkswagen Touareg updated but still off limits for US

The Volkswagen Touareg bowed out of the U.S. after 2017, with VW filling the gap with the more affordable Atlas. However, a redesigned third-generation Touareg has been on sale overseas since 2018, and now it has come in for a mid-cycle update. There's new styling front and rear, including the addition of a light strip at the front and more...


https://www.motorauthority.com/news/1138...g-revealed

Severe Flaw in Google Cloud's Cloud SQL Service Exposed Confidential Data

A new security flaw has been disclosed in the Google Cloud Platform's (GCP) Cloud SQL service that could be potentially exploited to obtain access to confidential data.
"The vulnerability could have enabled a malicious actor to escalate from a basic Cloud SQL user to a full-fledged sysadmin on a container, gaining access to internal GCP data like secrets, sensitive files, passwords, in addition

https://thehackernews.com/2023/05/severe...d-sql.html

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

The threat actors behind the nascent Buhti ransomware have eschewed their custom payload in favor of leaked LockBit and Babuk ransomware families to strike Windows and Linux systems.
"While the group doesn't develop its own ransomware, it does utilize what appears to be one custom-developed tool, an information stealer designed to search for and archive specified file types," Symantec said in a

https://thehackernews.com/2023/05/buhti-...ctics.html

Webinar with Guest Forrester: Browser Security New Approaches

In today's digital landscape, browser security has become an increasingly pressing issue, making it essential for organizations to be aware of the latest threats to browser security. That's why the Browser Security platform LayerX is hosting a webinar featuring guest speaker Paddy Harrington, a senior analyst at Forrester and the lead author of Forrester's browser security report "Securing The

https://thehackernews.com/2023/05/webina...owser.html

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

A Brazilian threat actor is targeting more than 30 Portuguese financial institutions with information-stealing malware as part of a long-running campaign that commenced in 2021.
"The attackers can steal credentials and exfiltrate users' data and personal information, which can be leveraged for malicious activities beyond financial gain," SentinelOne researchers Aleksandar Milenkoski and Tom

https://thehackernews.com/2023/05/alert-...users.html

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

An unnamed government entity associated with the United Arab Emirates (U.A.E.) was targeted by a likely Iranian threat actor to breach the victim's Microsoft Exchange Server with a "simple yet effective" backdoor dubbed PowerExchange.
According to a new report from Fortinet FortiGuard Labs, the intrusion relied on email phishing as an initial access pathway, leading to the execution of a .NET

https://thehackernews.com/2023/05/new-po...ed-in.html

Cynet Protects Hospital From Lethal Infection

A hospital with 2,000 employees in the E.U. deployed Cynet protections across its environment. The hospital was in the process of upgrading several expensive imaging systems that were still supported by Windows XP and Windows 7 machines. Cynet protections were in place on most of the Windows XP and Windows 7 machines during the upgrade process, ensuring that legacy operating systems would not

https://thehackernews.com/2023/05/cynet-...ethal.html

Zyxel Issues Critical Security Patches for Firewall and VPN Products

Zyxel has released software updates to address two critical security flaws affecting select firewall and VPN products that could be abused by remote attackers to achieve code execution.
Both the flaws – CVE-2023-33009 and CVE-2023-33010 – are buffer overflow vulnerabilities and are rated 9.8 out of 10 on the CVSS scoring system.
A brief description of the two issues is below -

CVE-2023-33009 -

https://thehackernews.com/2023/05/zyxel-...tches.html