Subaru Starlink flaw let hackers hijack cars in US and Canada

Subaru vulnerability exposed millions of cars to remote hacking and tracking

The discovery began when Sam Curry, having purchased a 2023 Impreza for his mother, decided to examine its internet-connected features during a Thanksgiving visit.

This Subaru Hack Exposed Location Data and Allowed Remote Access

A new hack has demonstrated just how much data Subaru and other car companies collect. Here's what happened and how you can protect your privacy.

Subaru Tracking Hack Raises Larger Privacy Questions

Sam Curry’s social media bio describes him as a “bug bounty hunter.” So when he raises an alarm over a security vulnerability that affects Subarus in no less than three large countries, people pay attention. In a lengthy blog post, he describes the findings he and fellow security expert Shubham Shah reached when using Subaru’s Starlink system — issues that allowed Curry and Shah to track and even start vehicles remotely.The security issue that C…

Subaru Starlink flaw let hackers hijack cars in US and Canada

Security researchers have discovered an arbitrary account takeover flaw in Subaru's Starlink service that could let attackers track, control, and hijack vehicles in the United States, Canada, and Japan using just a license plate.

Subaru security vulnerability exposed millions of cars to tracking risks

Two security researchers discovered a security vulnerability in Subaru’s Starlink-connected vehicles last year that gave them “unrestricted targeted access to all vehicles and customer accounts” across the U.S., Canada, and Japan, according to a Wired report. The researchers, Sam Curry and Shubham Shah, alerted the Japanese automaker to the flaws in November and they were quickly fixed. Subaru told Wired that “after being notified by independent…

Subaru’s poor security left troves of vehicle data easily accessible

Security researchers hacked into an admin portal that also let them remotely control cars. They say Subaru is only one of many automakers tracking vehicles with lax security.