Published 1 month ago • loading... • Updated 1 month ago

Subaru Starlink flaw let hackers hijack cars in US and Canada

Security researchers found a flaw in Subaru's Starlink service that allowed hackers to hijack cars in the US, Canada, and Japan using just a license plate.
The vulnerability required knowledge of the victim's last name and zip code, email address, phone number, or license plate to exploit.
Subaru patched the vulnerability within 24 hours of the report, and it was never exploited by an attacker.
The researchers noted that similar flaws affect other carmakers, highlighting a broader industry-wide security issue.

Insights by Ground AI

Does this summary seem wrong?

27 Articles

All

Left

Center

Right

Tech Spot

Subaru vulnerability exposed millions of cars to remote hacking and tracking

The discovery began when Sam Curry, having purchased a 2023 Impreza for his mother, decided to examine its internet-connected features during a Thanksgiving visit.

1 month ago

Read Full Article

Lifehacker

This Subaru Hack Exposed Location Data and Allowed Remote Access

A new hack has demonstrated just how much data Subaru and other car companies collect. Here's what happened and how you can protect your privacy.

1 month ago

Read Full Article

BleepingComputer

Subaru Starlink flaw let hackers hijack cars in US and Canada

Security researchers have discovered an arbitrary account takeover flaw in Subaru's Starlink service that could let attackers track, control, and hijack vehicles in the United States, Canada, and Japan using just a license plate.

1 month ago

Read Full Article

Fast Company

Subaru security vulnerability exposed millions of cars to tracking risks

Two security researchers discovered a security vulnerability in Subaru’s Starlink-connected vehicles last year that gave them “unrestricted targeted access to all vehicles and customer accounts” across the U.S., Canada, and Japan, according to a Wired report. The researchers, Sam Curry and Shubham Shah, alerted the Japanese automaker to the flaws in November and they were quickly fixed. Subaru told Wired that “after being notified by independent…

1 month ago

Read Full Article

Engadget

Subaru’s poor security left troves of vehicle data easily accessible

Security researchers hacked into an admin portal that also let them remotely control cars. They say Subaru is only one of many automakers tracking vehicles with lax security.

1 month ago·United States

Read Full Article