Gates dealership group gets boost from brand awareness

<p>Gates Automotive Group in South Bend, Ind., combines social media engagement, collaboration with local athletes and business leaders, and in-person giveaways and meet-and-greet events.</p>

https://www.autonews.com/best-practices/...ng-benefit

Survey due this month for Top Suppliers lists

<p>Automotive News is collecting data for its top suppliers rankings in North America, Europe and the world.</p>

https://www.autonews.com/suppliers/surve...iers-lists

Bosch to revamp mobility unit with goal of $88B in revenue by 2030

<p>The new Bosch Mobility unit will focus on software as a growth driver. Current mobility chairman Markus Heyn will lead it.</p>

https://www.autonews.com/mobility-report...e-software

Packagist Repository Hacked: Over a Dozen PHP Packages with 500 Million Installs Com

PHP software package repository Packagist revealed that an "attacker" gained access to four inactive accounts on the platform to hijack over a dozen packages with over 500 million installs to date.
"The attacker forked each of the packages and replaced the package description in composer.json with their own message but did not otherwise make any malicious changes," Packagist's Nils Adermann said

https://thehackernews.com/2023/05/packag...dozen.html

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cybera

Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw.
The issue, assigned the identifier CVE-2023-30777, relates to a case of reflected cross-site scripting (XSS) that could be abused to inject arbitrary executable scripts into otherwise benign websites.
The plugin, which is available both as a free and pro

https://thehackernews.com/2023/05/new-vu...press.html

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

An advanced persistent threat (APT) actor known as Dragon Breath has been observed adding new layers of complexity to its attacks by adopting a novel DLL side-loading mechanism.
"The attack is based on a classic side-loading attack, consisting of a clean application, a malicious loader, and an encrypted payload, with various modifications made to these components over time," Sophos researcher

https://thehackernews.com/2023/05/dragon...ouble.html

Google Expands Passkey Support With Passwordless Authentication

One year after Apple, Google and Microsoft pledged to support the FIDO Alliance’s passkeys standard, support is growing, though still early in adoption.

https://www.darkreading.com/dr-tech/goog...entication

Unifying XDR and SIEM Capabilities in 1 Platform

Discover how unifying XDR and SIEM in a single platform provides comprehensive protection against modern threats.

https://www.darkreading.com/endpoint/uni...1-platform

The (Security) Cost of Too Much Data Privacy

The online fraud prevention industry has taken the brunt of increased privacy actions.

https://www.darkreading.com/vulnerabilit...ta-privacy

2 Years After Colonial Pipeline, US Critical Infrastructure Still Not Ready for Rans

Sweeping changes implemented since the May 2021 cyberattack are helping — but more work remains to be done, security experts say.

https://www.darkreading.com/ics-ot/2-yea...ransomware