In June of 2024 security researchers uncovered a set of vulnerabilities in the Kia dealer portal that allowed them to remotely take over any Kia vehicle built after 2013—and all they needed was a license plate number.
According to the researchers: “These attacks could be executed remotely on any hardware-equipped vehicle in about 30 seconds, regardless of whether it had an active Kia Connect subscription.” How was this possible?
Read more…
Source: Malwarebytes Labs
Related:
- The Security dilemma of smart factories [Part 3] Fundamental security risks in robot languages
April 19, 2021
Industrial robots are the core of the automation of manufacturing processes in smart factories, and are the most important components as they support the manufacture of all kinds of products such as automobiles, aircraft, processed foods, and pharmaceuticals. In addition, as equipment that realizes unmanned manufacturing in the post-COVID-19 world where minimal or no contact ...
- Connected car cybersecurity a concern for consumers- HSB Survey
April 19, 2021
According to the Cyber Survey, 37% of respondents were somewhat or very concern about the cybersecurity and safety of connected cars. Meanwhile, 35% expressed their fear that a virus, a hack, or any other cyber-attack could destroy their car’s data, software, or operating systems. Eleven percent of respondents also said they drive an electric car, while ...
- New Advancements in 5G, Autonomous Vehicles to Drive Market Growth
March 31, 2021
Various giants in the 5G and connected car industries have recently announced new technological advancements that could drive further growth in the autonomous vehicle market. Sony, NTT DOCOMO, Hyundai, Singtel, and Ford just unveiled their latest ventures that could lead to better technologies- a move that can improve connected cars of the future. The Sony Corporation partnered ...
- China takes aim at ‘spying’ Tesla cars, bans military staff use
March 22, 2021
Elon Musk has said Tesla would be “shut down” if accusations that the firm’s cars could be used for spying purposes were true. Last week, the Wall Street Journal reported that the Chinese government has restricted the use of Tesla vehicles in military and key, state-owned company settings. Military and government staff are reportedly not permitted to ...
- SolarWinds-linked hacking group SilverFish abuses enterprise victims for sandbox tests
March 18, 2021
Cyberattackers involved in worldwide hacking campaigns are using the compromised systems of high-profile victims as playgrounds to test out malicious tool detection rates. On Thursday, Swiss cybersecurity firm Prodaft said that SilverFish (.PDF), an “extremely skilled” threat group, has been responsible for intrusions at over 4,720 private and government organizations including “Fortune 500 companies, ministries, airlines, ...
- Hackers access surveillance cameras at Tesla, Cloudflare, banks, more
March 9, 2021
Hackers gained access to live surveillance cameras installed at Tesla, Equinox, healthcare clinics, jails, and banks, including the Bank of Utah. In addition to images captured from the cameras, the hacker also shared screenshots of their ability to gain root shell access to the surveillance systems used by Cloudflare and at Telsa HQ. Hacks multiple cameras in ...