DarkReading
Carmakers are offering all kinds of over-the-air subscriptions and features, many of which benefit the businesses that use them. But this also opens up a wider attack surface for vehicle attackers.
SecurityWeek
Multiple vulnerabilities identified in vehicles from 16 manufacturers allowed researchers to control car functions, shut down engines, and obtain sensitive information.
Cyber Security News
sIf you drive a smart car, its high-tech, internet-connected systems are likely monitoring your every move. Vehicles with these features typically have telematics systems that track information like location, speed, and driving patterns, as well as GPS systems for navigation. Improving the vehicle’s performance, maintenance, and safety features are all possible with this information. There […]
Ars Technica
Connected car skeptics have a right to be concerned about the widespread problem.
Cyber Security News
Hackers exploit security flaws in Qualcomm to gain unauthorized access, execute malicious code, or potentially compromise data integrity and
Cyber Security News
Hackers could have performed malicious activities through API security vulnerabilities in nearly twenty car manufacturers and services. As a result of these vulnerabilities, hackers could be able to perform the following activities:-
The Hacker News
Researchers have uncovered API vulnerabilities in 16 major car brands, putting millions of vehicles at risk of cyberattacks.
Cyber Security News
As technology advances, so do the methods of malicious individuals seeking to exploit it. A concerning trend in the automotive industry is the injection of code.
The Record
Several of the biggest car brands have fixed dozens of vulnerabilities, some of which would have allowed for the full takeover of vehicles.
The Hacker News
Researchers have discovered a security vulnerability in SiriusXM services that allows remote hacking of connected cars from Honda, Nissan, Infiniti an
SecurityWeek
Ford says a critical vulnerability in the TI Wi-Fi driver of the SYNC 3 infotainment system does not pose a safety risk
SecurityWeek
A hacker is offering to sell data allegedly stolen from Volvo Cars following an Endurance ransomware attack.
The Record
A researcher found vulnerabilities allowing for remote access and control for cars made by Hyundai, Genesis, Honda, Nissan and Infiniti.
SecurityWeek
A critical vulnerability in the Cinterion cellular modems can be exploited for remote code execution via SMS messages.
Security Affairs
BMW, Mercedes, Toyota, and other popular carmakers use vulnerable APIs that could have allowed attackers to perform malicious activities. Cybersecurity researcher Sam Curry and his colleagues discovered many vulnerabilities in the vehicles manufactured by tens of carmakers and services implemented by vehicle solutions providers. The vulnerabilities could have been exploited by threat actors to perform […]
Bleeping Computer
A mishandled GitHub token gave unrestricted access to Mercedes-Benz's internal GitHub Enterprise Service, exposing source code to the public.
Cyber Security News
A critical Bug uncovered in Honda, Nissan, Infiniti, and Acura vehicle apps lets hackers and law enforcement agencies unlock the car remotely
Bleeping Computer
Vulnerabilities in mobile apps exposed Hyundai and Genesis car models after 2012 to remote attacks that allowed unlocking and even starting the vehicles.
The Record
In recent letters obtained by Recorded Future News, automotive companies pushed back against inquiries from the FCC about whether everyday vehicles are so technologically advanced that they might be subject to new regulations.
SecurityWeek
Mozilla has analyzed the privacy and security of 25 major car brands and found that they collect a lot of data
The Hacker News
NSA admits purchasing Americans' internet data from shadowy brokers, bypassing court orders.
The Cyber Express
Millions of Internet of Things (IoT) devices present across the industrial, healthcare, automotive, financial, and telecommunication sectors are at significant
Bleeping Computer
Security analysts disclosed severe API security flaws impacting numerous car makers, enabling them to access vehicle owner information, take over accounts, access internal systems, modify records, and track their position.
DarkReading
Researchers discovered seven vulnerabilities — including an unauthenticated RCE issue — in widely deployed Telit Cinterion modems.
SecurityWeek
Twenty-eight cybersecurity-related merger and acquisition (M&A) deals were announced in September 2023, fewer than last month
The Hacker News
Smart mobility services are seeing a surge in API-based incidents, with a 380% increase in 2022 compared to 2021, according to a recent report.
Ars Technica
As car owners grow hip to one form a theft, crooks are turning to new ones.
The Record
Many U.S. citizens don’t know their car data can easily be sucked up by a company working with law enforcement, potentially without a warrant, raising questions about automobile privacy.
The Record
Investigative reporter Byron Tau discusses his new book, “Means of Control: How the Hidden Alliance of Tech and Government is Creating a New American Surveillance State.”
Cyber Security News
Data Security Solutions for Insurance Providers: 1. Perimeter 81 2. Bitdefender 3. SecureWorks 4. Splunk 5. Symantec DLP 6. McAfee DLP