Carvana gifts AI-generated video histories to car-owning customers

<p>Each “Joyride” video relates the unique origin story of how an owner “met” their car.</p>

https://www.autonews.com/retail/carvana-...-customers

Startup UVeye raises $100 million for AI-powered car inspections

<p>UVeye, a company that uses artificial intelligence for vehicle inspections, has raised $100 million from investors including General Motors Co. and CarMax Inc.</p>

https://www.autonews.com/fixed-ops-journ...00-million

GM hires Apple cloud services exec Mike Abbott to lead software team

<p>Mike Abbott says GM has "massive opportunities" ahead as the automaker develops software aimed at consumers and businesses.</p>

https://www.autonews.com/mobility-report...bott-apple

Microsoft Warns of State-Sponsored Attacks Exploiting Critical PaperCut Vulnerability

Iranian nation-state groups have now joined financially motivated actors in actively exploiting a critical flaw in PaperCut print management software, Microsoft said.
The tech giant's threat intelligence team said it observed both Mango Sandstorm (Mercury) and Mint Sandstorm (Phosphorus) weaponizing CVE-2023-27350 in their operations to achieve initial access.
"This activity shows Mint

https://thehackernews.com/2023/05/micros...sored.html

Researchers Uncover SideWinder's Latest Server-Based Polymorphism Technique

The advanced persistent threat (APT) actor known as SideWinder has been accused of deploying a backdoor in attacks directed against Pakistan government organizations as part of a campaign that commenced in late November 2022.
"In this campaign, the SideWinder advanced persistent threat (APT) group used a server-based polymorphism technique to deliver the next stage payload," the BlackBerry

https://thehackernews.com/2023/05/resear...atest.html

From DevOps to DevSecOps: Strengthen Product Security with Collaborative Tools

In the fast-paced cybersecurity landscape, product security takes center stage. DevSecOps swoops in, seamlessly merging security practices into DevOps, empowering teams to tackle challenges. Let's dive into DevSecOps and explore how collaboration can give your team the edge to fight cyber villains.
Application security and product security
Regrettably, application security teams often intervene

https://thehackernews.com/2023/05/streng...urity.html

Operation ChattyGoblin: Hackers Targeting Gambling Firms via Chat Apps

A gambling company in the Philippines was the target of a China-aligned threat actor as part of a campaign that has been ongoing since October 2021.
Slovak cybersecurity firm ESET is tracking the series of attacks against Southeast Asian gambling companies under the name Operation ChattyGoblin.
"These attacks use a specific tactic: targeting the victim companies' support agents via chat

https://thehackernews.com/2023/05/operat...ckers.html

Fisker's debut SUV delayed by lingering software problems, report says

<p>Fisker has already delivered its first European-built Ocean SUV in Denmark, but the car has been returned as unusable, Bloomberg reported.</p>

https://www.autonews.com/manufacturing/f...e-problems

New Bazel Ruleset Helps Developers Build Secure Container Images

A new ruleset from Bazel, an open source build and test tool from Google, allows developers to create Docker images and generate software bills of materials about what is inside the containers.

https://www.darkreading.com/dr-tech/new-...ner-images

New Ransomware Strain 'CACTUS' Exploits VPN Flaws to Infiltrate Networks

Cybersecurity researchers have shed light on a new ransomware strain called CACTUS that has been found to leverage known flaws in VPN appliances to obtain initial access to targeted networks.
"Once inside the network, CACTUS actors attempt to enumerate local and network user accounts in addition to reachable endpoints before creating new user accounts and leveraging custom scripts to automate

https://thehackernews.com/2023/05/new-ra...loits.html