CarMax quarterly net income, used-car sales plunge

<p>CarMax said net income plunged 57 percent to $69 million in the quarter ended Feb. 28.</p>

https://www.autonews.com/used-cars/carma...steep-dive

Ford's Oakville plant in Canada will build EVs starting in 2024

<p>The site, to be renamed the Oakville Electric Vehicle Complex, will include a 407,000-square-foot battery pack assembly plant.</p>

https://www.autonews.com/manufacturing/f...start-2024

U.S. wants to change how EV fuel economy is calculated

<p>The proposed rule-making is in response to a 2021 petition submitted by two environmental groups, which argued the calculation is outdated and resulted in "significantly inflated" EV fuel economy values.</p>

https://www.autonews.com/mobility-report...my-formula

Top N.A. purchasing, supplier executives to speak at supply chain roundtable on June

<p>Three top North American purchasing executives and two top supplier CEOs are scheduled to speak during a June 12 roundtable discussion as part of the 2023 Automotive Golf Classic in suburban Detroit.</p>

https://www.autonews.com/suppliers/top-p...golf-event

Union opposes driverless trucks exemption for Waymo, Aurora

<p>A major transport union opposed a request filed by Alphabet's self-driving unit Waymo and autonomous driving technology company Aurora for an exemption from rules on warning devices for large semi-trucks, citing safety issues.</p>

https://www.autonews.com/mobility-report...ymo-aurora

Hackers Flood NPM with Bogus Packages Causing a DoS Attack

Threat actors flooded the npm open source package repository for Node.js with bogus packages that briefly even resulted in a denial-of-service (DoS) attack.
"The threat actors create malicious websites and publish empty packages with links to those malicious websites, taking advantage of open-source ecosystems' good reputation on search engines," Checkmarx's Jossef Harush Kadouri said in a

https://thehackernews.com/2023/04/hacker...kages.html

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers.
The sophisticated typosquatting campaign, which was detailed by JFrog late last month, impersonated legitimate packages to execute PowerShell code designed to retrieve a follow-on binary

https://thehackernews.com/2023/04/crypto...lware.html

[eBook] A Step-by-Step Guide to Cyber Risk Assessment

In today's perilous cyber risk landscape, CISOs and CIOs must defend their organizations against relentless cyber threats, including ransomware, phishing, attacks on infrastructure, supply chain breaches, malicious insiders, and much more. Yet at the same time, security leaders are also under tremendous pressure to reduce costs and invest wisely. 
One of the most effective ways for CISOs and

https://thehackernews.com/2023/04/ebook-...-risk.html

Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security

Malicious loader programs capable of trojanizing Android applications are being traded on the criminal underground for up to $20,000 as a way to evade Google Play Store defenses.
"The most popular application categories to hide malware and unwanted software include cryptocurrency trackers, financial apps, QR-code scanners, and even dating apps," Kaspersky said in a new report based on messages

https://thehackernews.com/2023/04/cyberc...aders.html

Newly Discovered "By-Design" Flaw in Microsoft Azure Could Expose Storage Accounts t

A "by-design flaw" uncovered in Microsoft Azure could be exploited by attackers to gain access to storage accounts, move laterally in the environment, and even execute remote code.
"It is possible to abuse and leverage Microsoft Storage Accounts by manipulating Azure Functions to steal access-tokens of higher privilege identities, move laterally, potentially access critical business assets, and

https://thehackernews.com/2023/04/newly-...aw-in.html