Researchers unlock automaker connected cars globally via platform flaws

Researchers discovered security vulnerabilities in a major automaker's connected car platform that allowed remote unlocking and control of vehicles in Australia and other regions. By exploiting exposed administrative tools, identity platform credentials, and a web application firewall path traversal bypass, the researchers were able to mint consumer app tokens and send remote commands. Open article →