honda

The new release expands the solution’s capabilities with five additional interface languages, enhanced Proxmox VE backup and recovery, automated real-time replication, improved MSP Direct Connect, and granular backups for physical machines. NAKIVO, a global leader in backup, ransomware protection and disaster recovery across virtual, physical, cloud, NAS and SaaS environments, has officially introduced NAKIVO Backup & Replication v11.1. This version brings a refined suite of improvements designed to strengthen disaster resilience and minimize downtime and data loss across diverse IT environments, while making accessibility and MSP tenant management even more efficient. Multilingual Interface: 5 New Languages Version 11.1 extends NAKIVO Backup & Replication’s linguistic reach, now offering full support for French, Italian, German, Polish and Chinese—alongside English and Spanish. This allows users to run backup and recovery operations, automate workflows and manage resources in whichever language feels most natural, enhancing the overall user experience. NAKIVO v11.1: Instant VM recovery with Flash VM Boot, real-time replication for zero data loss. Automated disaster recovery across VMware, Proxmox, Hyper-V, and physical systems. Start your 15-day free trial now. Start Free Trial Expanded Backup Capabilities for Proxmox VE Building upon the groundwork set in version 11, the v11.1 release brings major upgrades to Proxmox VE support. Businesses can now achieve higher resilience without expensive infrastructure changes. The update includes: Flash VM Boot for instant operational recovery in seconds. VM Replication to maintain uptime and ensure rapid failover in case of disruptions or data corruption. VM Template Backup and Recovery for consistent, fast deployment of pre-configured VMs. Automated Backup Verification with comprehensive reports and screenshots. Direct Recovery from Tape without a staging repository. Exchange and SQL Server Log Truncation to improve efficiency and optimize storage use. MSP Direct Connect Previously, connecting MSP systems with client environments required opening ports on the client side. With v11.1, the new MSP Direct Connect removes that necessity, introducing a streamlined and secure connection model that simplifies onboarding and deployment. All communications between the MSP Director and Client Transporter are fully encrypted to comply with rigorous security standards. Support now extends beyond VMware and Windows/Linux machines to include Hyper-V and Proxmox VE, extending the capabilities of NAKIVO backup for MSPs and enabling providers to manage hybrid infrastructures more efficiently than ever. Real-Time Replication for VMware Now officially released, Real-Time Replication enables constant synchronization of VMware VMs with their live sources. The setup is effortless: The solution automatically installs the IO Filter and Journal Service, eliminating the need for manual intervention. Admins can embed real-time failover in Site Recovery workflows to automate failover to the active replicas. During an outage, the Site Recovery job triggers immediate takeover, ensuring uninterrupted service and zero data loss. All transferred data is encrypted over unsecured WAN links, providing robust protection against interception. Granular Backup for Physical Machines Version 11.1 enables backing up selected folders or volumes on physical Windows and Linux systems, in addition to full-machine protection. Granular backups can be saved to nearly any location—local drives, cloud repositories, deduplication storage, file shares or even tape—while supporting encryption, immutability and air-gapping. Recovery is equally flexible: Data can be recovered to SMB/NFS shares, emailed or downloaded through a web browser. This selective approach enables quick and easy recovery of the needed folders or volumes. Driving Resilience and Accessibility “This release turns NAKIVO Backup & Replication into a core asset for businesses aiming to navigate the complexities of data protection and management,” said Bruce Talley, CEO of NAKIVO. “With an interface supporting 7 languages, streamlined MSP direct connect, and seamless recovery and failover automation, v11.1 puts easily-accessible data protection within immediate reach—no matter the environment. v11.1 truly builds on our 13 years of backup and disaster recovery innovations.” Feature Availability NAKIVO Backup & Replication v11.1 is now available for download. Customers can update their existing installations to take advantage of the new enhancements or test them first-hand with the 15-day Free Trial. RESOURCES ABOUT NAKIVO NAKIVO is a US-based corporation dedicated to delivering the ultimate backup, ransomware protection and disaster recovery solution for virtual, physical, cloud and SaaS environments. Over 16,000 customers in 185 countries trust NAKIVO with protecting their data, including major companies like Coca-Cola, Honda, Siemens and Cisco. Visit us at: www.nakivo.com Sponsored and written by Nakivo.

Vulnerabilities discovered by a researcher in a major automaker’s dealership systems could have been exploited to remotely hack cars and obtain personal information. The research was summarized over the weekend by Eaton Zveare, researcher at Harness, at the DEF CON hacking conference. The researcher told SecurityWeek that he will soon publish a blog post detailing the findings. In recent years, Zveare found vulnerabilities in the online platforms of several major car manufacturers, including Honda and Toyota. His latest research focused on an online platform used by more than 1,000 US dealerships belonging to an unnamed carmaker. The platform can be used to order cars, make sales, and manage customers. While it is accessible over the internet, car dealership employees need an invite in order to register an account. However, the researcher was able to find the account registration form even without an invitation, and abused a profile updating functionality along with API vulnerabilities to create a ‘national admin’ account that gave him full access to the platform. [ Read: Free Wi-Fi Leaves Buses Vulnerable to Remote Hacking ] Zveare noticed that the platform allowed dealers to look up a vehicle based on the customer’s name or the car’s VIN. With the help of a friend who owns a vehicle made by the affected carmaker, he conducted some tests and found that he was able to abuse the platform to transfer the ownership of the vehicle to a newly created account. With his account tied to the targeted car, Zveare was able to use the associated mobile application to remotely track the vehicle’s location, unlock it, and start the engine. The researcher believes the attack would have worked against any car model made since 2012 as long as it had a standard telematics module. The attacker only needed to know the victim’s name. Further research led to the discovery of different portals used by the same brand — including for loaner cars — on which Zveare also managed to obtain elevated privileges, which granted him access to customer and employee personal information, contracts, financial documents, car tracking, and other internal functionality. Harness told SecurityWeek that the name of the impacted automaker is not being shared, but the company did address the vulnerabilities after being notified. “The goal of this research is not to call out one company — it’s to highlight broader, systemic risks in dealer-manufacturer platforms that often fly under the radar. Naming names shifts the conversation away from what really matters: improving security across the industry,” Traceable said. Related: Millions of Cars Exposed to Remote Hacking via PerfektBlue Attack Related: Nissan Leaf Hacked for Remote Spying, Physical Takeover Related: Subaru Starlink Vulnerability Exposed Cars to Remote Hacking

Strong regulation can nudge automakers to improve customers’ privacy, research suggests New research asserts that while few automakers strongly protect website and customer portal users’ privacy, one company drastically improved its practices after California’s privacy regulator fined it in March for allegedly failing to implement relevant standards required under state law. A report released Wednesday by the watchdog Privacy4Cars scored 44 car brands on a scale of 0-5. The median ranking was 1.7 for a host of privacy practices, including whether companies easily allow consumers and agents acting on their behalf to file opt-out requests to prevent the sale and sharing of personal data. The scorecard shows that American Honda Motor Co. scored just 0.8 prior to the California Privacy Protection Agency's crackdown. After the agency issued a $632,500 fine and required the automaker to implement new procedures to allow Californians to more easily assert their privacy rights, Honda’s score skyrocketed to 4.6, considerably ahead of all other vehicle manufacturers, the report shows. Privacy4Cars founder and CEO Andrea Amico said he hopes the scorecard will push more car companies to improve privacy practices by giving public credit to those which do. He compared it to the advent of crash-test ratings a generation ago, when strong safety ratings made some models more marketable. “When companies make changes and those changes benefit consumers, they should get credit in this way,” Amico said. “Privacy is taken out of the fog, and it becomes something that companies can compete on — and if they do that, I think that this is going to be an innovation flywheel that keeps improving over time.” Honda referred comment to vehicle manufacturers’ trade association, the Alliance for Automotive Innovation. A spokesperson there noted that Privacy4Cars is a for-profit company. In addition to offering free information about automakers’ privacy practices to consumers, the organization sells its services to car dealers and agents, who request data sharing opt-outs on consumers’ behalf. “We still have major questions about Privacy4Cars’ methodology and business practices,” the Alliance’s spokesperson said in a statement which noted that the report was not made available to it prior to publication. “The criteria this group used to grade automakers doesn’t reflect the industry’s privacy policies or compliance with California’s privacy law.” “Automakers are committed to protecting consumer privacy and vehicle data. Full stop.” The new research only reflects how easy companies make it for consumers to protect their data privacy when interacting with manufacturers’ websites and web portals and does not assess what information manufacturers collect and sell through vehicles themselves. The Privacy4Cars report says it would be easy for other automakers to follow Honda’s example, pointing out that the company changed its website and web portal privacy practices within eight weeks of the California enforcement action. In addition to measuring ease of opt-out, the report studied how difficult automakers’ websites and web portals made it for consumers to request their data be deleted and to block cookies. Top-performing brands other than Honda and its Acura brand were Subaru with a 3.8 rating and Polestar and Rivian with 3.3. All other brands received scores below 60 percent when measured against 12 criteria considered by Privacy4Cars. Ford, Polestar, Rivian, and Volvo met with Privacy4Cars after learning of the report’s findings and made some privacy improvements within three weeks of the meetings, the report says. Subaru, Polestar and Rivian did not respond to a request for comment. A Ford spokesperson sent a statement saying that privacy is a “priority at Ford. We comply fully with all consumer privacy laws and extend key rights, such as the ability to access and request deletion of personal information, to all our customers in the U.S., regardless of their state's specific laws.” A Volvo spokesperson said in a statement that it “is and always will be about safety, including the protection of data. All data is processed in accordance with applicable law.” Suzanne Smalley is a reporter covering digital privacy, surveillance technologies and cybersecurity policy for The Record. She was previously a cybersecurity reporter at CyberScoop. Earlier in her career Suzanne covered the Boston Police Department for the Boston Globe and two presidential campaign cycles for Newsweek. She lives in Washington with her husband and three children.

CISA has warned that attackers are actively exploiting two security vulnerabilities in the SysAid IT service management (ITSM) software to hijack administrator accounts. The two unauthenticated XML External Entity (XXE) flaws, tracked as CVE-2025-2775 and CVE-2025-2776, were reported by watchTowr Labs security researchers in December 2024 and patched in March with the release of SysAid On-Prem version 24.4.60. One month later, watchTowr Labs also published proof-of-concept code, showing that the SysAid vulnerabilities are trivial to exploit and allow attackers to retrieve local files containing sensitive information. While CISA didn't share any additional details regarding these ongoing attacks, it did add the two vulnerabilities to its Known Exploited Vulnerabilities Catalog, giving Federal Civilian Executive Branch (FCEB) agencies three weeks to patch their systems by August 12 as mandated by the November 2021 Binding Operational Directive (BOD) 22-01. Although BOD 22-01 primarily targets U.S. federal agencies, the cybersecurity agency encourages all organizations, including private companies, to prioritize patching the two actively exploited flaws as soon as possible. "These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise," CISA warned. SysAid On-Prem is hosted on customers' infrastructure, enabling IT teams to manage various services within an organization. According to Shadowserver data, dozens of SysAid instances are currently exposed online, most of them from North America and Europe. "At SysAid, we take security very seriously and would like to assure our users that we have addressed and mitigated these vulnerabilities through appropriate patches," a SysAid spokesperson told BleepingComputer. "We have also provided CISA with the latest information on how to patch these vulnerabilities, and we encourage all customers to ensure their systems are updated with the most recent security updates." SysAid has over 5,000 customers and more than 10 million users across 140 countries worldwide, serving a diverse range of clients, from small businesses to Fortune 500 enterprises, including high-profile companies such as Xerox, IKEA, Coca-Cola, Honda, Michelin, and Motorola. Update July 24, 03:33 EDT: Added SysAid statement. Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply. The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments. Get the report