For individuals

Two US senators accuse carmakers of deceptive language and shifty practices in sharing and resale of driver data.

While the DDoS attack was the initial trigger, Microsoft said it was “amplified” by an internal misconfiguration.

Numerous Electoral Commission accounts had similar passwords or default credentials, which could increase vulnerability to intrusions.

Intrusions involved the delivery of phishing emails with malicious RAR or ISO attachments, with the former triggering direct DBatLoader execution and the latter obscuring a Windows batch script with a PEM-encoded certificate revocation list-masquerading DBatLoader executable.

Attackers leveraged agreement-spoofing phishing emails to deliver a RAR archive with a malicious DLL, which would execute DSDownloader.

CyberScoop reports that artificial intelligence, low influence operation costs, and legal challenges were noted by Senate Intelligence Chairman Mark Warner, D-Va., to worsen misinformation and disinformation campaigns targeted at the upcoming elections.

Influence operations are expected to exploit recent developments in the presidential campaign, including President Joe Biden's dropping of a reelection bid in favor of Vice President Kamala Harris and the attempted assassination of former President Donald Trump.

The security vulnerabilities, CVE-2024-37394, CVE-2024-37395, and CVE-2024-37396, could lay open proprietary and sensitive research to data thieves.

If paying a ransom is prohibited, organizations won't do it — eliminating the incentive for cybercriminals. Problem solved, it seems. Or is it?

Outages impacting Microsoft 365 and Azure were noted by Ookla's Downdetector site to have peaked at 363 and 483 on Tuesday at around 6:22 a.m. Pacific, with users in the Americas. Europe, the Middle East, and Africa, and Asia Pacific affected by the issues.