Watch remote hackers easily take control of this Jeep and more

ronjor · Nov 20, 2019

FCC chairman to propose dividing spectrum between auto safety, Wi-Fi use

November 20, 2019
(Reuters) - Federal Communications Commission chairman Ajit Pai will propose on Wednesday splitting a key band of spectrum that had been set aside for auto safety between Wi-Fi use and automakers, sources said.
Click to expand...

guest · Nov 26, 2019

European Cybersecurity Agency Publishes Report on Smart Car Security
November 26, 2019
https://www.infosecurity-magazine.com/news/enisa-publishes-report-on-smart/

The European Union Agency for Cybersecurity (ENISA) yesterday published a report on the cybersecurity of smart cars.
The report aims to promote cybersecurity for connected and (semi-)automated cars by identifying emerging threats and issuing guidance on potential security measures that can help to mitigate them.

"Smart cars already available today provide connected, added-value features in order to enhance car users’ experience or improve car safety. With this increased connectivity (that the emergence of 5G is expected to further promote) novel cybersecurity risks and threats arise and need to be managed," the report states.

The new report presents a more in-depth analysis of the conclusions reached in ENISA’s 2017 study, "The ENISA Cybersecurity and Resilience of Smart Cars—Good Practices and Recommendations."
Cyber-attacks on smart cars could cause damage that goes far beyond the loss of sensitive personal information.
Click to expand...

ENISA: ENISA good practices for security of Smart Cars

hawki · Dec 17, 2019

"What does your car know about you?

We hacked a Chevy to find out.

Our privacy experiment found that automakers collect data through hundreds of sensors and an always-on Internet connection. Driving surveillance is becoming hard to avoid..."

This is a very detailed,extensive, (and scary) look at how today's car collect data and the types of data collected.

[The Washington Post allows several free views/month, even in private mode, so no paywall problem.]

https://www.washingtonpost.com/tech...-car-know-about-you-we-hacked-chevy-find-out/

guest · Dec 24, 2019

New Study Shows Just How Bad Vehicle Hacking Has Gotten
December 23, 2019
https://cacm.acm.org/news/241766-new-study-shows-just-how-bad-vehicle-hacking-has-gotten/fulltext

A report from Israeli security firm Upstream paints a grim picture of the state of vehicular cybersecurity.

"Smart Mobility Cyber Attacks," a repository of publicly reported automotive cyber incidents since 2010, states that automobiles have been affected by the wave of Internet-connected upgrades sweeping through everyday life. Increased connectivity has opened up more opportunities for hackers scheming to seize unauthorized control of automobiles, according to the report.
Upstream says there were 150 cases of vehicle hacking in 2019, a 99% increase from 2018. Moreover, the auto industry has experienced 94% year-over-year growth in hacks since 2016.
Click to expand...

CNET: New study shows just how bad vehicle hacking has gotten

guest · Jan 7, 2020

Rochester security firm helps car companies by hacking their vehicles
January 7, 2020
https://www.fox2detroit.com/news/ro...helps-car-companies-by-hacking-their-vehicles

It's hard to comprehend just how much cars are now controlled by computers. But with this marriage of transportation and technology, it helps to understand the security that protects these computers from would-be hackers.
The alternative could mean someone wirelessly controlling a vehicle.

"We're able to control things like the windshield wipers. The scary part is if someone's able to control things like this, especially remotely, you can start controlling things like parameters of the engine," said Brandon Barry of Block Harbor Cybersecurity.
Using his firm Block Harbor Cybersecurity, Barry thinks like a hacker and tries to gain access to the computers that help run cars.
"What we do is look at the way a system is built and detect vulnerabilities to attempt to exploit them. So, in essence, we're acting like the attacker to find the holes so we can help our customers plug those holes," said Barry.
Click to expand...

ronjor · Jan 10, 2020

Connected Cars Moving Targets for Hackers

By AFP on January 09, 2020
As cars evolve into rolling mobile computers, the potential for disastrous cyber attacks has become a new road hazard.
Israeli cybersecurity firm GuardKnox demonstrated the threat in a Formula 1 driving simulation at the Consumer Electronics show this week in Las Vegas.
Click to expand...

ronjor · Jan 21, 2020

Data-driven vehicles: The next security challenge

Nate Pool, Principal Solutions Architect, Base2 Solutions January 21, 2020
Companies are increasingly building smart products that are tailored to know the individual user. In the automotive world, the next generation passenger vehicle could behave like a personal chauffeur, sentry and bodyguard rolled into one.
Click to expand...

guest · Jan 29, 2020

mood said: ↑

Autonomous vehicle sensors tricked by "invisible" drone projections of road signs
August 2, 2019

MobilBye: Attacking ADAS with Camera Spoofing (PDF - 4.41 MB): https://arxiv.org/pdf/1906.09765.pdf
Click to expand...

How a $300 projector can fool Tesla’s Autopilot
Semi-autonomous driving systems don't understand projected images
January 28, 2020
https://arstechnica.com/cars/2020/01/how-a-300-projector-can-fool-teslas-autopilot/

Since then, he has expanded the technique to experiment—also successfully—with confusing a Tesla Model X and will be presenting his findings at the Cybertech Israel conference in Tel Aviv.

The spoofing attacks largely rely on the difference between human and AI image recognition. For the most part, the images Nassi and his team projected to troll the Tesla would not fool a typical human driver—[...]
Nassi created a video outlining what he sees as the danger of these spoofing attacks, which he called "Phantom of the ADAS," and a small website offering the video, an abstract outlining his work, and the full reference paper itself.

From a security perspective, the interesting angle here is that the attacker never has to be at the scene of the attack and doesn't need to leave any evidence behind—and the attacker doesn't need much technical expertise. A teenager with a $400 drone and a battery-powered projector could reasonably pull this off [...]
Click to expand...

ronjor · Jan 29, 2020

The hunt for security flaws in self-driving cars steps up a gear

By Daphne Leprince-Ringuet January 29, 2020
To deploy connected cars to the roads, developers need to make sure that vehicles are safe from cyberattacks. And the challenge is still great.
Click to expand...

ronjor · Feb 13, 2020

Rental cars can be remotely started, tracked, and more after customers return them

Dan Goodin - 2/12/2020
Previous driver could start and stop the engine, lock and unlock doors, and track location.
Click to expand...

guest · Feb 15, 2020

Carjacking made easy: Hacker creates device that can unlock any luxury car
February 15, 2020
https://www.hindustantimes.com/tech...-luxury-car/story-EdcsfpZfvXFkGhPNQEbfWI.html

A hacker named “EvanConnect” has developed a device which helps users break into any luxury car that uses a wireless key fob system.
He named the device “keyless repeater” which he sells for $9,000 and demonstrated that how it works in a video which he released recently.

The video shows him approaching an unattended car which belongs to his friend who gave him permission to use it and using the small handheld device with an antenna to unlock the driver’s side door of the car and start the engine, dailymail.co.uk reported on Friday.
Additionally, he also mentioned about the upgraded version of the same for $12,000 which can unlock any car that uses a wireless fob system.

“Honestly I can tell you that I have not stolen a car with technology, it is very easy to do, but the way I see it, why would I get my hands dirty when I can make money just selling the tools to other people,” he said.
Click to expand...

Samy Kamkar, a security expert Vice after reviewing EvanConnect’s footage, said the keyless repeater technology is commonly known in the field.

“I can not validate that the video is legitimate but I can say that it is 100 per cent reasonable (I have personally performed the same attack on more than a dozen vehicles with hardware I’ve built and very easy to demonstrate),” the report quoted Kamkar.
Click to expand...

Motherboard / Vice: Meet the Guy Selling Wireless Tech to Steal Luxury Cars in Seconds

Motherboard obtained a video of a so-called relay attack from EvanConnect, who sells keyless repeaters that can be used to break into and steal luxury cars.
Click to expand...

guest · Feb 19, 2020

Warning over car key hackers in Dorchester
February 19, 2020
https://www.wessexfm.com/news/dorset-news/3047312/warning-over-car-key-hackers-in-dorchester/

Officers think car key hackers may be operating in the town.
Its when thieves attack built in systems that can unlock a car when the key is nearby.

RAC Insurance director Mark Godfrey suggests that drivers should take preventative measures to reduce the possibility of car key hacking.
Mark said:

"Drivers with keyless systems can take precautions to prevent their vehicles being stolen including storing their keys in protective cases so the signal can't be cloned, or even switching off the keyless feature on the fob if it is an option.
"Instead, put keys in a drawer or cupboard away from any windows or doors where they might be seen, or keep them in your bag or jacket."
Click to expand...

guest · Feb 19, 2020

Hackers on the other side of the world can take control of your vehicle
February 19, 2020
https://www.boston.com/cars/car-gui...of-the-world-can-take-control-of-your-vehicle

No, you’re not talking crazy.
The threat of regular people having their vehicles carjacked by cyberattackers is real.

Fact is, computer hackers on the other side of the world potentially could — while you’re driving — crash your navigation system, cut your brakes, disrupt your steering or remotely take control of the entire vehicle. Hackers do not need to be in close proximity; all they need is something as simple as internet connectivity. Cars have become heavily connected to the internet.
They are essentially computers on wheels.
All a hacker needs to identify your vehicle is the computer network.

“You can’t believe how easy it is,” Shlisel said. “They can penetrate the GPS (global positioning system) and understand your location and get your internet address. You can do it remotely by just penetrating the network and do whatever you want.”
Click to expand...

Companies must be on alert at all times, cyber experts said The key to safety is establishing a strong defense, monitoring carefully and being prepared for attack.
Click to expand...

guest · Feb 27, 2020

Hackers target connected vehicles
February 28, 2020
https://archive.shine.cn/world/Hackers-target-connected-vehicles/shdaily.shtml

The security of vehicles, smart home systems and public organizations have become new issues for the cybersecurity industry, China’s top security firm 360 said yesterday.

Connected cars represent a trend with smart driving and mobile communications development and the popularity of technologies such as 5G and artificial intelligence. Connected car systems have become new targets for hackers.
With 360’s system now in over 300,000 cars, it has detected over 500 security loopholes, covering private information leaks, car connection and even social security. The company has joined with Mercedes-Benz to talk about the issue during RSA 2020, a top level security event held in the United States.
Click to expand...

ronjor · Feb 28, 2020

GM prioritizes cybersecurity with internal training and bug bounties

by Veronica Combs in Security on February 28, 2020
GM is working with industry colleagues, company engineers, and middle school students to make cybersecurity a cornerstone of the auto industry, according to GM Chairman and CEO Mary Barra. Barra spoke at RSA 2020 on Thursday and explained the company's sophisticated strategy to improve cybersecurity now and in the future.
Click to expand...

guest · Mar 5, 2020

Hackers Can Clone Millions of Toyota, Hyundai, and Kia Keys
Encryption flaws in a common anti-theft feature expose vehicles from major manufacturers
March 5, 2020
https://www.wired.com/story/hackers-can-clone-millions-of-toyota-hyundai-kia-keys/

Over the past few years, owners of cars with keyless start systems have learned to worry about so-called relay attacks, in which hackers exploit radio-enabled keys to steal vehicles without leaving a trace.
Now it turns out that many millions of other cars that use chip-enabled mechanical keys are also vulnerable to high-tech theft. A few cryptographic flaws combined with a little old-fashioned hotwiring—or even a well-placed screwdriver—lets hackers clone those keys and drive away in seconds.

Researchers from KU Leuven in Belgium and the University of Birmingham in the UK earlier this week revealed new vulnerabilities they found in the encryption systems used by immobilizers, the radio-enabled devices inside of cars that communicate at close range with a key fob to unlock the car's ignition and allow it to start.
Click to expand...

guest · Mar 23, 2020

Web-based attack crashes Tesla driver interface
March 23, 2020
https://portswigger.net/daily-swig/web-based-attack-crashes-tesla-driver-interface

A security researcher has praised electric sports car maker Tesla for its prompt response to a web-based denial-of-service (DoS) attack he uncovered.

Jacob Archuleta ‘Nullze’ discovered the DoS vulnerability (CVE-2020-10558) after investigating the Tesla Model 3’s web interface.
Improper process separation made it possible for the malicious web page to disable the speedometer, web browser, climate controls, turn signals, navigation, autopilot notifications, and other miscellaneous functions from the main screen of the Tesla 3.
Auto-update
After reporting the DoS vulnerability through Tesla’s bug bounty program, hosted by Bugcrowd, Archuleta worked with car manufacturer’s security team to get the issue resolved.
The security flaw in the driving interface of Tesla Model 3 vehicles is resolved in versions 2020.4.10 and above of the software.
Click to expand...

Archuleta has put together a write-up of his hack, complete with demonstration videos.
Click to expand...

guest · Mar 30, 2020

Vulnerabilities Expose Lexus, Toyota Cars to Hacker Attacks
March 30, 2020
https://www.securityweek.com/vulnerabilities-expose-lexus-toyota-cars-hacker-attacks

Research into the AVN (Audio, Visual and Navigation) system in the 2017 Lexus NX300 — the same system is also used in other models, including LS and ES series — has revealed security issues with the Bluetooth and vehicular diagnosis functions on the car.
According to Keen Security Lab, these flaws could be abused to compromise the AVN and internal CAN network and related electronic control units (ECUs).

Furthermore, the researchers said they were able to wirelessly take control of the AVN unit without user interaction, then inject malicious CAN messages to cause the car to perform “physical actions.”
However, the specific technical details related to these vulnerabilities will be disclosed only next year, the researchers say.
Click to expand...

Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars
Toyota: Toyota Acknowledges Tencent Keen Security Lab's Initiatives for Improving Automotive Cybersecurity

Toyota has already implemented measures to address the vulnerabilities in the vehicles currently being produced. For certain in-market vehicles equipped with the specific multimedia units, owners can update the software.
Click to expand...

guest · May 29, 2020

O2 completes Innovate UK cyber security project blueprint for self-driving cars
May 29, 2020
https://www.computerweekly.com/news...urity-project-blueprint-for-self-driving-cars

Leading UK telco O2 has revealed that it has completed its contribution for the 12-week-long Baselining, Automation and Response for CAV Testbed (BeARCAT) cyber security project, funded by the UK’s government-funded innovation agency Innovate UK and the Centre for Connected and Autonomous Vehicles (CCAV).
Explaining its participation in the project, O2 said the security of the UK’s transport system had never been more important, and would only increase with time as cyber attacks become more complex and sophisticated.

Commenting on the trial, O2 chief technology officer (CTO) Brendan O’Reilly said: “If connected and autonomous vehicles are going to become a permanent fixture in our day-to-day lives, it will be critical that governments and the public feel reassured that this technology is secure from cyber attacks. [...]”
Click to expand...

guest · Jun 7, 2020

Has your Chrysler been hacked? Consortium announces Israel recalls amid concern of cyberattacks
June 7, 2020
https://www.calcalistech.com/ctech/articles/0,7340,L-3831230,00.html

Car recalls are far from a rarity and happen weekly across the world, but recalls in which the manufacturer announces that the car is susceptible to hacking are certainly not commonplace.

According to the announcement, Jeep's 2014 and 2015 models of Cherokee and Grand Cherokee are vulnerable to attacks via their radio and multimedia systems.

"The sound system has a certain vulnerability in its security which could allow unauthorized third parties to access some of the cars online control systems," the press release read.
According to the press release, the recall is also applicable to other vehicles belonging to the Chrysler consortium that were privately imported to the country, including the Dodge Charger, Challenger and Viper, the company's super car that can reach speeds of up to 280 kmh.
Click to expand...

guest · Jun 19, 2020

Car autopilot security
To protect ADAS from external interference, cars need a special approach to cybersecurity
June 18, 2020
https://www.kaspersky.com/blog/protecting-adas/35961/

Today, many companies are experimenting to the max with autopilots of varying complexity. Some are trying to build devices that actually take control of the vehicle out of human hands, while others are developing advanced driver-assistance systems (ADAS).
The main issue that autopilot manufacturers must address is guaranteeing reliability and safety. After all, people’s lives depend on the proper functioning of the system.

There is also the fact that modern cars, by and large, are Internet-connected cyberphysical systems, so the autopilot must be not only reliable, but also protected from outside interference.
Cars and cybersecurity [...]
Click to expand...

guest · Jul 25, 2020

Keyless entry is key to stealing other people's cars for European crime ring
July 23, 2020
https://mashable.com/article/mercedes-benz-european-crime-ring-keyless-entry-relay-attack/

Convenience often comes at a cost.

For the victims of a sprawling European crime ring that relied on a keyless entry system to steal scores of Mercedes-Benz, the cost was the loss of their cars. And, conversely, for the criminals who so easily boosted the cars, the cost may now end up being their freedom.
Car thieves had been stealing Mercedes-Benz equipped with the KEYLESS-GO system mostly in Germany, moving them to Poland, and dismantling them to sell for parts.

"The Polish criminal network was well-organized and stole high-value cars equipped with KEYLESS GO systems," reads the Europol press release. "The suspects were able to bridge the keyless lock and engine starting system with technical equipment."
Click to expand...

Mercedes-Benz touts its KEYLESS-GO system as enabling the following exciting capabilities: [...]
In other words, the KEYLESS-GO system allows you to unlock, start, and drive away with a car. Pretty handy.

Thankfully, there's an easy — and relatively inexpensive — way to prevent relay attacks. All you need to do is, once home, put your keys inside a faraday sleeve (Silent Pocket makes decent ones). That way, thieves will not be able to relay the signal from your wireless key to their device. And, consequently, stealing your car won't be such a breeze.
Heck, it might even take a physical key.
Click to expand...

Europol: End of the road for keyless car thieves in Germany and Poland

German and Polish law enforcement authorities, supported by Europol, dismantled a network of thieves stealing expensive cars equipped with KEYLESS GO systems.
Click to expand...

hawki · Aug 5, 2020

"Is data security keeping up with connected cars?

In 2019, the number of reported cyberattacks on connected vehicles was seven times higher than the same figure from 2016 with a 99% increase in incidents from 2018 alone.

Connected cars produce up to 25GB of data every hour, including information about the driver, the vehicle and passengers.

A Boeing 787 jet has about 6.5 million lines of code, while a standard connected car has about 100 million..."

https://www.uswitch.com/guides/car-insurance/data-security-in-connected-cars/

guest · Aug 6, 2020

Security bugs let these car hackers remotely control a Mercedes-Benz
August 7, 2020
https://techcrunch.com/2020/08/06/security-bugs-mercedes-benz-hack/

Few could ever forget back in 2015 when security researchers Charlie Miller and Chris Valasek remotely killed a Jeep’s engine on a highway with a Wired reporter at the wheel.

Since then, the car hacking world has bustled with security researchers looking to find new bugs — and ways to exploit them — in a new wave of internet-connected cars that have only existed the past decade.
Security researchers at the Sky-Go Team, the car hacking unit at Qihoo 360, found more than a dozen vulnerabilities in a Mercedes-Benz E-Class car that allowed them to remotely open its doors and start the engine.
Click to expand...

The researchers said the car’s security design was tough and able to withstand a number of attacks, but it was not impervious.

“Making every back-end component secure all the time is hard,” the researchers said. “No company can make this perfect.”
But at least in the case of Mercedes-Benz, its cars are a lot more secure than they were a year ago.
Click to expand...

guest · Sep 19, 2020

mood said: ↑

Tesla is seeking $167 million in damages from the former employee Elon Musk accused of sabotage
December 11, 2018
https://www.cnbc.com/2018/12/11/tes...in-damages-from-ex-employee-martin-tripp.html
Click to expand...

Judge narrows Tesla lawsuit against former employee, dismisses defamation counterclaim
September 19, 2020
https://in.reuters.com/article/tesl...smisses-defamation-counterclaim-idINKBN26A0EL

A federal judge narrowed Tesla Inc's TSLA.O lawsuit against a former employee it accused of hacking into its computers and leaking proprietary data to a reporter. The judge also dismissed a defamation counterclaim by the former employee.

In a decision on Thursday, Chief Judge Miranda Du of the federal court in Reno, Nevada said Tesla failed to show that Martin Tripp’s disclosure of confidential information caused a $167 million decline in the electric car maker’s market value.
But she refused to dismiss some other Tesla claims, including that Tripp’s alleged unauthorized use of data might have violated a Nevada computer crimes law, and that his conduct justified punitive damages.
Click to expand...

Log in or Sign up

Watch remote hackers easily take control of this Jeep and more

ronjor Global Moderator

guest Guest

hawki Registered Member

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

hawki Registered Member

guest Guest

guest Guest

Log in or Sign up

Watch remote hackers easily take control of this Jeep and more

ronjor Global Moderator

guest Guest

hawki Registered Member

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

hawki Registered Member

guest Guest

guest Guest

Useful Searches