The Fédération Internationale de l’Automobile (FIA), the governing body for Formula One and other auto racing events, has disclosed a data breach involving unauthorized access to personal data stored in two of its email accounts. Hackers gained access to the accounts through phishing. 

Cyberscoop reported that the activity of the Intellexa group, known for its use of the Predator spyware, appears to have declined following sanctions and the exposure of its operations. Researchers have seen a significant decrease in activity, but noted that this may also be the result of the spyware maker finding ways to avoid detection. 

Microsoft has shared details on a couple of critical- and high-severity vulnerabilities discovered in Rockwell Automation PanelView Plus HMIs. The flaws can be remotely exploited by unauthenticated attackers for remote code execution and denial-of-service (DoS) attacks. The security holes were patched by Rockwell in September and October 2023. 

SentinelOne has shared an update on the CapraRAT Android spyware, which was previously associated with the Pakistan-linked state-sponsored threat group Transparent Tribe. The hackers have been embedding spyware into curated video browsing applications, with a new expansion targeting mobile gamers, weapons enthusiasts, and TikTok fans