Researchers Pwn Automakers’ Android Apps to Remotely Unlock Cars, Honk Horns
8 Articles
8 Articles
Researchers accessed accounts linked to two-brand connected cars and tested remote controls.
Security in connected cars has just gained a worrying example of how seemingly simple failures can compromise advanced automotive technologies. Cybersecurity researchers have discovered that a combination of factory administrative credentials, inadequate server configurations and flaws in the protection rules of a web application firewall (WAF) allowed customers to assume accounts and remotely send commands to connected vehicles in the United St…
Security researchers Sam Curry and Shubham Shah discovered a serious vulnerability in the systems of two car manufacturers. The vulnerability allowed hackers to hijack user accounts of mobile apps and then remotely control functions of the associated apps... Full version of the page: https://ithardware.pl/aktualnosci/samochody_luka_bezpieczenstwa-55964.html
Hackers Used Default admin:admin Credentials to Exploit ForgeRock RCE and Remotely Unlock Cars
Researchers used default admin:admin credentials as part of a vulnerability chain that let them run code on two automakers’ production ForgeRock servers and remotely unlock connected cars. Found in early 2026 and disclosed on November 7, the flaws also exposed vehicle locations and supported remote engine commands. The findings came from controlled security research, not a reported criminal campaign. Both unnamed automakers fixed the issue withi…
Default ‘admin:admin’ Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the engine. Both apps signed customers in through ForgeRock, an identity platform now part of Ping Identity,
Coverage Details
Bias Distribution
- 50% of the sources lean Left, 50% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
