Forget the Kia Boyz: Hackers could hijack your car with just a smartphone

Infosec roundup: a researcher and collaborators found an API-abuse vulnerability in Kia dealer portals enabling remote vehicle control and data exposure (now fixed); CISA added Ivanti Traffic Manager CVE-2024-7593 (CVSS 9.8) to the Known Exploited Vulnerabilities list; Monaco registrar Namebay suffered a ransomware attack impacting mail and hosting services; a small Kansas water treatment plant experienced a disruptive cyber incident with limited impact; and US authorities charged a UK national for hacking companies to profit from insider trading, while social platforms also acted to remove state-linked media accounts.