Connected cars’ illegal data collection and use now on FTC’s “radar” | Ars Technica

The Federal Trade Commission’s Office of Technology has issued a warning to automakers that sell connected cars. Companies that offer such products “do not have the free license to monetize people’s information beyond purposes needed to provide their requested product or service,” it wrote in a blog post on Tuesday. Just because executives and investors want recurring revenue streams, that does not “outweigh the need for meaningful privacy safeguards,” the FTC wrote

Researchers spot cryptojacking attack that disables endpoint protections | Ars Technica

Malware recently spotted in the wild uses sophisticated measures to disable antivirus protections, destroy evidence of infection, and permanently infect machines with cryptocurrency-mining software, researchers said Tuesday.

Windows admins targeted with clever malvertising scam | TechRadar

Hackers are targeting Windows system administrators with malvertising, hoping to get them infected with ransomware. 

FBI Public Servi e Announcement

Alert Number: I-051624-PSA

May 16, 2024

Democratic People’s Republic of Korea Leverages U.S.-Based Individuals to Defraud U.S. Businesses and Generate Revenue

How a new wave of deepfake-driven cybercrime targets businesses

As deepfake attacks on businesses dominate news headlines, detection experts are gathering valuable insights into how these attacks came into being and the vulnerabilities they exploit.

North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign

The North Korea-linked Kimsuky hacking group has been attributed to a new social engineering attack that employs fictitious Facebook accounts to targets via Messenger and ultimately delivers malware

Someone connected Windows XP to the internet, and it didn’t survive long

https://www.xda-developers.com/connected-windows-xp-internet-didnt-survive-long/

Linux maintainers were infected for 2 years by SSH-dwelling backdoor with huge reach | Ars Technica

https://arstechnica.com/security/2024/05/ssh-backdoor-has-infected-400000-linux-servers-over-15-years-and-keeps-on-spreading/2/

Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities – SecurityWeek

https://www.securityweek.com/microsoft-patches-60-windows-vulns-warns-of-active-zero-day-exploitation/

(Cyber) Risk = Probability of Occurrence x Damage

https://thehackernews.com/2024/05/get-cyber-resilient-with-cvss.html?m=1