---
id: 6565
title: "Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More"
source_domain: samcurry.net
source_url: "https://samcurry.net/web-hackers-vs-the-auto-industry"
published_at: "2023-01-03T00:00:00Z"
tags: ["bug-bounty", "account-takeover", "api-security", "car-hacking", "automotive-security", "vin", "mercedes-benz"]
phying_url: "https://phying.com/item/6565"
lang: en
---

# Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

## Summary

Sam Curry's team found automotive API flaws across brands: VIN numbers sufficed for remote commands and account takeover at Kia, Honda and Nissan, while Mercedes-Benz SSO exposed internal systems.

## Intelligence Metadata

- **Sources:** samcurry.net
- **Published:** 2023-01-03T00:00:00Z
- **Original:** https://samcurry.net/web-hackers-vs-the-auto-industry
- **Phying News:** https://phying.com/item/6565