Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

samcurry.net | blog | #bug-bounty | #account-takeover | #api-security | #car-hacking | #automotive-security | #vin | #mercedes-benz

Summary

Sam Curry's team found automotive API flaws across brands: VIN numbers sufficed for remote commands and account takeover at Kia, Honda and Nissan, while Mercedes-Benz SSO exposed internal systems.
Published
Collected

original ↗

Related coverage

  1. Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel (samcurry.net)
  2. Hacking Kia: Remotely Controlling Cars With Just a License Plate (samcurry.net)
  3. Hacking Chess.com and Accessing 50 Million Customer Records (samcurry.net)
  4. Big Bugs Podcast Episode 1: Auto Bugs – Critical Vulns found in Cars with Jason Haddix (bugcrowd.com)
  5. The First-Ever Car Hacking Event of Its Kind: #bcbugbash Louisville (bugcrowd.com)
  6. Hacking Starbucks and Accessing Nearly 100 Million Customer Records (samcurry.net)

back