A new vulnerability, CVE-2024-42195, has been identified in HCL DevOps Deploy and HCL Launch, enabling users to embed arbitrary HTML tags in the Web UI, causing potential sensitive information disclosure. HCL Software has urged users to update their systems to safeguard against exploitation. No workarounds or alternative mitigations are currently available.
800,000 VW electric vehicle owners’ data exposed by software bug
German carmaker Volkswagen is investigating a data leak at its software subsidiary Cariad which exposed the personal data and geolocation of about 800,000 electric vehicle