Researchers Exploit ForgeRock Default Credentials to Remotely Unlock Cars
Researchers remotely accessed vehicle data and controls after RCE on production ForgeRock servers; automakers fixed the flaws in hours.
Stories per day · 30 days
3 RSS
Relatedalpine2ilx-f5112pwn2own2threat-modeling2vehicle-security2zero-day2ai-agents1android1anthropic1bloatware1buffer-overflow1claude1comma-ai1compliance1connected-cars1consumer1covesa1denial-of-service1
20 stories, newest first · one card per story
Stories tagged #automotive
Methodology maps TARA goals to NAC rules for automotive and energy networks
Six-step process translates threat analysis into enforceable network access control rules across critical infrastructure.
Schneier notes bloatware found in a cheap car head unit
A Civic owner reportedly used Claude to inspect an Amazon head unit and found a call recorder, Baidu location services, and an always-on WebView assistant.
Study compares Kyber, Dilithium and FALCON in simulated vehicle links
Rural V2V and urban V2X runs also include an ECDSA/ECDH baseline measured in the same setup.
Alpine iLX-F511 framework service overflow allows code execution
ZDI rates the unauthenticated, physically triggered flaw 6.8 and labels it a Pwn2Own zero-day.
Researchers model protocol-conformant vehicles from a malicious maker
The model says authenticity does not prove declared purpose, and hidden functions can evade peer-visible checks.
vsomeip 3.7.3 and earlier can exhaust memory over TCP (CVE-2026-91141)
A remote peer can force allocation of up to about 4 GB per connection before any bytes are validated.
IQ.Lvbs claims Comma.ai IP tried to steal its driving model
The startup says attempts ran October 7-14 and is reviewing legal options; Comma.ai has not commented.
1
AI agents are coming to Rivian’s cars
Rivian plans to let third-party AI agents from Anthropic and others run in its vehicles, while keeping them off driving controls.
Automotive Hardware Attacks: An Architect's Guide to TARA
ISO/SAE 21434 TARA underrates physical hardware attacks; authors add a hardware-aware feasibility method.
Rethinking automotive cyber risk for the age of accelerated vulnerability discovery
Automotive vulnerabilities jumped to 345 in Q2 2026, with shared cloud and supplier flaws widening fleet exposure.
9
Automakers routinely share personally identifiable connected-car data with third parties, report says
Researchers say most automakers share connected-car personal data with advertisers and brokers.
3
Lights, Camera, Attack: Exploiting Temporal HDR Fusion with Pulsed Light
Pulsed-light FLASH attack disrupts temporal HDR fusion, darkening iPhone, Wyze, and OpenPilot camera pipelines.
Trading Maintenance for Momentum: Scaling Security Validation Across 230+ Sites
An automotive manufacturer adopted Horizon3 NodeZero to validate security across more than 230 sites.
X-SPUR: Explainable Surprisal-Based Protocol-Aware Unsupervised Reasoning for Automotive Ethernet Intrusion Detection
X-SPUR flags Automotive Ethernet attacks unsupervised via token surprisal, scoring AUC 0.9987 on TOW-IDS.
Lightweight Zero Trust via Automotive SDN
Researchers map automotive SDN with MACsec/MKA and CORECONF/YANG to NIST SP 800-207, satisfying five of seven Zero Trust tenets without added infrastructure.
Android Malware Hijacks Update System for Car Head Units
A click-fraud botnet crew now deploys Android malware to car head-unit infotainment systems by abusing the legitimate software update mechanism.
1
Hackers infecting Android car systems to build proxy botnet
Kaspersky reports MoYu Group-linked malware infecting DoFun Android car head units, enrolling them in a BadBox-linked proxy botnet for ad fraud and traffic routing.
Malware Hijacks Android Car Head Units
Kaspersky reports first known malware infecting Android car head units via firmware updaters, repurposing vehicles as BADBOX proxy nodes for ad fraud.
The invisible passenger in your car
Kaspersky discovered Android adware and proxy-botnet malware delivered inside legitimate DoFun car head-unit software.