Nissan infosec in the spotlight again after breach affecting more than 50K US employees

Infosec roundup: Nissan disclosed a November 2023 targeted attack that compromised an external VPN and exposed SSNs for 53,038 U.S. employees; Nissan Oceania was separately hit by the Akira ransomware gang impacting over 100,000 customers. The bulletin also highlights an actively exploited Chrome zero-day (CVE-2024-4947), numerous critical ICS vulnerabilities (several CVSS 9–10 issues), FTC guidance on connected-car privacy, Cisco Talos macOS fuzzing work, and a WebTPA incident potentially exposing ~2.5 million individuals' personal and health data.