[tomek@vz]

Auch...

According to Car and Driver, Hyundai has suffered a data breach that leaked the personal data of up to 2.7 million customers. The leak reportedly took place in February from Hyundai AutoEver, the company's IT affiliate. It includes customer names, driver's license numbers, and social security numbers. Longtime Slashdot reader sinij writes:

---

With the holiday travel season approaching – a period that typically brings a surge in booking-related communications – the likelihood of renewed phishing attempts remains high. Microsoft and other vendors have updated their endpoint protection tools to detect known ClickFix command patterns, but these defenses remain largely reactive. As long as social-engineering lures appear credible and require no file downloads, preventing infection will continue to depend primarily on user vigilance.
A year of escalating social-engineering attacks has produced one of the most efficient infection chains observed to date. Known as ClickFix, this method requires only that a user follow a brief set of instructions (typically copying and pasting a single line of text into a system terminal). Once the command executes, the user's machine – Mac or PC – contacts a remote server controlled by the attackers, downloads malware, and executes it silently. No visible file transfer, pop-up, or security alert interrupts the process.

> Hackers found a way to weaponize CAPTCHA pages, and it's incredibly effective