Rethinking automotive cyber risk for the age of accelerated vulnerability discovery
Automotive vulnerabilities jumped to 345 in Q2 2026, with shared cloud and supplier flaws widening fleet exposure.
9
Stories per day · 30 days
1 RSS
3 stories, newest first · one card per story
Stories tagged #ota
ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability
ZDI disclosed a Pwn2Own certificate validation flaw (CVSS 6.8) in Amazon Smart Plug's OTA process, allowing network-adjacent attackers to bypass update verification.
ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed a Pwn2Own out-of-bounds write RCE (CVSS 7.5) in Amazon Smart Plug's OTA process, exploitable by unauthenticated network-adjacent attackers.