Supply chain event features top executives

<p>Three top North American purchasing executives and two top supplier CEOs are scheduled to speak during a June 12 roundtable discussion as part of a longtime charity golf outing in suburban Detroit.</p>

https://www.autonews.com/suppliers/auto-...roundtable

Ford to sell F-150 Lightning in EV-loving Norway

<p>Ford will begin selling the F-150 Lightning in Norway, where EVs accounted for 80 percent of new-vehicle sales last year.</p>

https://www.autonews.com/sales/ford-take...ing-norway

Car Pros dealership group emphasizes the human element of car sales

<p>Car Pros has a companywide training program centered around the human element of car sales.</p>

https://www.autonews.com/best-practices/...-car-sales

CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The three vulnerabilities are as follows -

CVE-2023-28432 (CVSS score - 7.5) - MinIO Information Disclosure Vulnerability 
CVE-2023-27350 (CVSS score - 9.8) - PaperCut MF/NG Improper Access Control

https://thehackernews.com/2023/04/cisa-a...ws-to.html

Lazarus X_TRADER Hack Impacts Critical Infrastructure Beyond 3CX Breach

Lazarus, the prolific North Korean hacking group behind the cascading supply chain attack targeting 3CX, also breached two critical infrastructure organizations in the power and energy sector and two other businesses involved in financial trading using the trojanized X_TRADER application.
The new findings, which come courtesy of Symantec's Threat Hunter Team, confirm earlier suspicions that the

https://thehackernews.com/2023/04/lazaru...tical.html

New Policy Group Wants to Improve Cybersecurity Disclosure, Support Researchers

The new Security Legal Research Fund and Hacking Policy Council are aimed at protecting "good faith" security researchers from legal threats and giving them a voice in policy discussions.

https://www.darkreading.com/edge-article...esearchers

OpenSSF Adds Software Supply Chain Tracks to SLSA Framework

The Open Source Security Foundation's SLSA v1.0 release is an important milestone in improving software supply chain security and providing organizations with the tools they need to protect their software.

https://www.darkreading.com/dr-tech/open...-framework

The Tangled Web of IR Strategies

Attackers have their methods timed to the second, and they know they have to get in, do their damage, and get out quickly. CISOs today must detect and block in even less time.

https://www.darkreading.com/vulnerabilit...strategies

Shadow IT, SaaS Pose Security Liability for Enterprises

Software written or acquired outside of IT's purview is software that IT can't evaluate for security or compliance.

https://www.darkreading.com/edge-article...nterprises

Intel Prioritizes Security in Latest vPro Chips

While Intel is building more hardware protections directly into the chips, enterprises still need a strategy for applying security updates on these components.

https://www.darkreading.com/dr-tech/inte...vpro-chips