Breach

BleepingComputer reports that General Motors had information from some of its customers compromised as a result of a credential stuffing incident last month.

SecurityWeek reports that Trickbot Group, also known as ITG23 or Wizard Spider, has moved to quickly expand its operations following the deployment of the TrickBot malware family six years ago, while moving to automated malware encryption.

This week’s breach roundup includes multiple data thefts and is led by the continued impact of an Eye Care Leaders ransomware attack, which includes Regional Eye about 194,000 patients.

The Hacker News reports that a high-severity vulnerability in Google's OAuth client library for Java has been fixed last month.

Interactive chatbots are being used in phishing attacks in an effort to increase victim confidence, while reducing their attention, according to SecurityWeek.

Cybersecurity firm Nisos discovered that the Fronton botnet, which was first discovered by a hacktivist group to have been created on behalf of Russia's intelligence service, had more extensive capabilities beyond enabling distributed denial-of-service attacks, ZDNet reports.

BleepingComputer reports that malware activity from the stealthy Linux trojan XorDDoS has spiked by 254% over the past six months.

GitLab Continuous Integration pipelines are being targeted in a new software supply chain attack dubbed CrateDepression, which involves malware deployment, reports SecurityWeek.