Polestar turns to certified pre-owned to offset limited new inventory

<p>A new CPO program will help amplify brand awareness, Polestar North America boss says.</p>

https://www.autonews.com/used-cars/poles...fitability

Kia recalls Carnival minivans after sliding door causes injuries

<p>Injury reports included one fractured thumb, one broken arm, seven bruises, swelling and minor cuts or scrapes related to the power sliding door.</p>

https://www.autonews.com/regulation-safe...r-injuries

Ourisman Cars adds Ford, Toyota and Stellantis dealerships

<p>Ourisman Cars, a group of dealerships within Ourisman Automotive Group, bolstered its Maryland presence with third-quarter 2022 and first-quarter 2023 acquisitions.</p>

https://www.autonews.com/dealers/ourisma...erships-md

Tesla's Q1 sales more than double those of No. 2 BMW in U.S. luxury market

<p>Electrified vehicles accounted for nearly 17 percent of BMW's U.S. Q1 sales.</p>

https://www.autonews.com/sales/luxury-te...-those-bmw

2024 Acura Integra Type S delivers 320 hp, sporty styling

<p>Acura's 2024 Integra Type S will go on sale in June with 320 hp, aggressive styling and significant performance enhancements.</p>

https://www.autonews.com/cars-concepts/2...ty-styling

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers.
The sophisticated typosquatting campaign, which was uncovered by JFrog late last month, impersonated legitimate packages to execute PowerShell code designed to retrieve a follow-on binary

https://thehackernews.com/2023/04/crypto...lware.html

North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack

Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows and macOS was the handiwork of a threat actor with North Korean nexus.
The findings are the result of an interim assessment conducted by Google-owned Mandiant, whose services were enlisted after the intrusion came to light late last month. The threat intelligence

https://thehackernews.com/2023/04/lazaru...llima.html

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

It's the second Tuesday of the month, and Microsoft has released another set of security updates to fix a total of 97 flaws impacting its software, one of which has been actively exploited in ransomware attacks in the wild.
Seven of the 97 bugs are rated Critical and 90 are rated Important in severity. Interestingly, 45 of the shortcomings are remote code execution flaws, followed by 20

https://thehackernews.com/2023/04/urgent...or-97.html

The Service Accounts Challenge: Can't See or Secure Them Until It's Too Late

Here's a hard question to answer: 'How many service accounts do you have in your environment?'. A harder one is: 'Do you know what these accounts are doing?'. And the hardest is probably: 'If any of your service account was compromised and used to access resources would you be able to detect and stop that in real-time?'. 
Since most identity and security teams would provide a negative reply,

https://thehackernews.com/2023/04/the-se...t-see.html

Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit

Threat actors using hacking tools from an Israeli surveillanceware vendor named QuaDream targeted at least five members of civil society in North America, Central Asia, Southeast Asia, Europe, and the Middle East.
According to findings from a group of researchers from the Citizen Lab, the spyware campaign was directed against journalists, political opposition figures, and an NGO worker in 2021.

https://thehackernews.com/2023/04/israel...dream.html