Subaru Starlink flaw let hackers hijack cars in US and Canada
- Security researchers found a flaw in Subaru's Starlink service that allowed hackers to hijack cars in the US, Canada, and Japan using just a license plate.
- The vulnerability required knowledge of the victim's last name and zip code, email address, phone number, or license plate to exploit.
- Subaru patched the vulnerability within 24 hours of the report, and it was never exploited by an attacker.
- The researchers noted that similar flaws affect other carmakers, highlighting a broader industry-wide security issue.
27 Articles
27 Articles
Subaru Tracking Hack Raises Larger Privacy Questions
Sam Curry’s social media bio describes him as a “bug bounty hunter.” So when he raises an alarm over a security vulnerability that affects Subarus in no less than three large countries, people pay attention. In a lengthy blog post, he describes the findings he and fellow security expert Shubham Shah reached when using Subaru’s Starlink system — issues that allowed Curry and Shah to track and even start vehicles remotely.The security issue that C…
Subaru Starlink flaw let hackers hijack cars in US and Canada
Security researchers have discovered an arbitrary account takeover flaw in Subaru's Starlink service that could let attackers track, control, and hijack vehicles in the United States, Canada, and Japan using just a license plate.
2025 - Security Researcher Discovers Vulnerability Enabling Remote Access to Millions of Subaru Vehicles
A significant security flaw in Subaru’s web portal was discovered by cybersecurity expert Sam Curry, allowing remote access to millions of vehicles in the U.S., Japan, and Canada. Alongside colleague Shubham Shah, Curry exploited an employee site vulnerability, gaining control over Starlink features and vehicle location data. Following their disclosure to Subaru in late November 2024, the manufacturer took swift action, but similar vulnerabiliti…
Subaru security vulnerability exposed millions of cars to tracking risks
Two security researchers discovered a security vulnerability in Subaru’s Starlink-connected vehicles last year that gave them “unrestricted targeted access to all vehicles and customer accounts” across the U.S., Canada, and Japan, according to a Wired report. The researchers, Sam Curry and Shubham Shah, alerted the Japanese automaker to the flaws in November and they were quickly fixed. Subaru told Wired that “after being notified by independent…
Coverage Details
Bias Distribution
- 67% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
