PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Big Bugs Podcast Episode 1: Auto Bugs – Critical Vulns found in Cars with Jason Haddix

bugcrowd.com | blog | #iot | #car-hacking | #bugcrowd | #tesla | #podcast | #automotive-security | #jason-haddix
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd's first Big Bugs podcast episode, hosted by Jason Haddix, introduces car hacking with case studies from Tesla research to Samy Kamkar's Ownstar, plus key testing resources.
Published
Collected

Related coverage

blog · samcurry.net
Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel
A flaw in Subaru's STARLINK admin panel gave unrestricted access to vehicles and accounts in the US, Canada and Japan—remote commands, a year of location history, PII—keyed on a last name and ZIP.
blog · samcurry.net
Hacking Kia: Remotely Controlling Cars With Just a License Plate
Kia vulnerabilities let attackers remotely unlock, start and track any hardware-equipped vehicle with a license plate—~30 seconds, subscription or not—and add themselves as invisible second users.
blog · samcurry.net
Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More
Sam Curry's team found automotive API flaws across brands: VIN numbers sufficed for remote commands and account takeover at Kia, Honda and Nissan, while Mercedes-Benz SSO exposed internal systems.
blog · netspi.com
A Strategic Approach to Automotive Security
Covers automotive security risks from misconfigured ECUs to connected features, references ISO/SAE 21434 and TARA methodology, and outlines best practices for OEMs to secure vehicle design.
blog · netspi.com
The Payment Card Industry: Innovation, Security Challenges, and Explosive Growth
PCI Council's John Markh discusses securing payment card data, the evolution of PCI DSS and related standards, and new frameworks for mobile payments, cloud, and IoT emerging technologies.
blog · samcurry.net
Cracking my windshield and earning $10,000 on the Tesla Bug Bounty Program
A blind XSS payload left in a Tesla Model 3's 'Name Your Vehicle' field fired months later from an internal tool when support handled a windshield repair—earning a $10,000 bounty from Tesla.
Back