Watch remote hackers easily take control of this Jeep and more

hawki · Jan 7, 2019

U.S Supreme Court allows lawsuit claiming possible future damages from vehicle cyber-security risks to proceed:

"U.S. top court declines to take up Fiat Chrysler hacking case

WASHINGTON (Reuters) - The U.S. Supreme Court on Monday declined to hear Fiat Chrysler’s appeal in a class action lawsuit over allegations that its Jeeps and other trucks are vulnerable to hacking, one of the first legal cases involving automotive cybersecurity risks...

The court’s action paves the way for a March trial in the litigation centering on the question of whether truck buyers can sue over hypothetical future injuries without having been actual victims of cybersecurity attacks on their vehicles. Fiat Chrysler has received widespread support from industry groups in the dispute..."

https://www.reuters.com/article/us-...e-up-fiat-chrysler-hacking-case-idUSKCN1P11FZ

guest · Jan 14, 2019

Tesla is entering the Model 3 into Pwn2Own, one of the world’s toughest hacking contests
January 14, 2019
https://techcrunch.com/2019/01/14/t...-one-of-the-worlds-toughest-hacking-contests/

Tesla is handing over its new Model 3 sedan to Pwn2Own this year, the first time a car has been included in the annual high-profile hacking contest.
The prize for the winning security researcher: a Model 3.

Of course, there’s no guarantee that hackers at Pwn2Own Vancouver will find any vulnerabilities. TechCrunch was told by a Trend Micro spokesperson that the percentage of successful attempts varies, but it’s usually around 50% of available targets.

It’s also unclear if researchers will enter the automotive category since it’s new this year, the spokesperson said, adding that she hopes people enter “as we would love to see what the state of the art in automotive research really is.”
Click to expand...

guest · Jan 22, 2019

Mitsubishi Develops Cybersecurity Technology for Cars
January 22, 2019
https://www.securityweek.com/mitsubishi-develops-cybersecurity-technology-cars

Many modern vehicles include communication features that allow connections to the Internet and mobile devices. While these features can be highly useful, they can also introduce cybersecurity risks.

Mitsubishi has developed new technology that should protect connected cars against threats by using multiple layers of defense, including an intrusion detection system, secure booting, and authentication mechanisms.
According to Mitsubishi, the threat detection system focuses on typical attack-related activities in an effort to reduce load processing. The secure boot feature speeds up the booting process and ensures that the embedded software has not been tampered with by verifying its integrity.
Click to expand...

guest · Jan 28, 2019

Hundreds of popular cars ‘at risk of keyless theft’
January 28, 2019
https://www.bbc.co.uk/news/business-47023003

Thieves are increasingly thought to be using technology to bypass entry systems on keyless cars.
But industry body the Society of Motor Manufacturers & Traders (SMMT) said "new cars are more secure than ever".

Which? analysed data on keyless - or "relay" - attacks from the General German Automobile Club (ADAC), a roadside recovery organisation.
"Thieves have been using keyless theft for several years, but manufacturers continue to make new models that can be stolen in this way, meaning there is an ever-larger pool of vehicles for thieves to target," Which? said in a statement.

"Criminals will always look for new ways to steal cars; it's an ongoing battle and why manufacturers continue to invest billions in ever more sophisticated security features - ahead of any regulation.
Click to expand...

ronjor · Feb 7, 2019

Synopsys and SAE International Release New Study Highlighting Critical Cybersecurity Risks in the Automotive Industry

News provided by Synopsys, Inc. Feb 06, 2019, 07:00 ET
Survey Conducted by the Ponemon Institute Reveals Automotive Manufacturers and Suppliers are Struggling to Incorporate Cybersecurity Best Practices Throughout Product Development Life Cycle
Click to expand...

guest · Feb 14, 2019

Tesla begins rolling out Sentry Mode for added theft protection
February 14, 2019
https://www.neowin.net/news/tesla-begins-rolling-out-sentry-mode-for-added-theft-protection

Tesla has announced that it has begun rolling out Sentry Mode to Model 3 cars in the United States today. It will also follow this up by bringing the feature to Model S and Model X vehicles that were built after August 2017. With Sentry Mode, Tesla owners get an extra layer of security against theft, although it can’t prevent thefts altogether.

If you’re away from the vehicle when it switches into alarm mode, you’ll get an alert from the Tesla mobile app letting you know what’s going on. There will also be a downloadable video showing the events that on-board cameras managed to record.
Tesla warns that Sentry Mode has to be enabled each time the driver wants to use the feature, so don’t assume it’s on by default.
Click to expand...

guest · Feb 14, 2019

ronjor said: ↑

Toyota Builds Open-Source Car-Hacking Tool
Click to expand...

Toyota Prepping 'PASTA' for its GitHub Debut
February 14, 2019
https://www.darkreading.com/vulnera...ing-pasta-for-its-github-debut/d/d-id/1333886

The lead developer behind Toyota's new cybersecurity testing tool said the carmaker plans to make its so-called PASTA (Portable Automotive Security Testbed) available via GitHub as early as next month or April.

The open source tool represents a major shift for automakers, which traditionally have rejected or ignored vulnerability research on cybersecurity weaknesses in modern vehicles.
PASTA also can be used by automakers in R&D to test how certain features added to real vehicles could affect the security of the vehicle, for example. "PASTA could also be used for educators" teaching car security, Toyama said.

Toyama and his colleague Takuya Yoshida, principal researcher with Toyota InfoTechnology Center, will demonstrate PASTA next month at Black Hat Asia in Singapore.
Click to expand...

guest · Feb 20, 2019

SK Telecom to launch quantum gateway for self-driving car security
February 20, 2019
https://www.zdnet.com/article/sk-telecom-to-launch-quantum-gateway-for-self-driving-car-security/

SK Telecom will launch its Quantum Security Gateway solution aimed at preventing hacking in self-driving cars at Mobile World Congress, the company says.

The solution is an integrated security device that will be installed inside cars and protect various electronic units and networks in the vehicle.
The gateway, which was co-developed with South Korean controller maker GINT, will monitor various devices for Vehicle-2-Everything (V2X), Bluetooth, radar, smart keys, and driver assistance systems.

It will alert the driver and any connected monitoring centre of hacking.
Click to expand...

ronjor · Feb 20, 2019

Mojio raises $40 million to monetize connected car data

Paul Sawers@psawers February 20, 2019
There will be an estimated 200 million connected cars on the world’s roads by 2020, a number that could rise to nearly 500 million in the U.S., Europe, and China alone by 2025. One of the big by-products of all these connected automobiles is data — location data, diagnostic data, drivers’ behavioral data, and more — which presents a lucrative opportunity for myriad applications and services
Click to expand...

.

guest · Feb 23, 2019

Hacking Autonomous Vehicles: Is This Why We Don't Have Self-Driving Cars Yet?
February 22, 2019
https://www.techopedia.com/hacking-...hy-we-dont-have-self-driving-cars-yet/2/33650

The Consequences of Self-driving Car Hacking
When hacking occurs in a data center, the worst that can happen is a loss of data. When a self-driving car is hacked, what can happen is a loss of life.
On the other hand, self-driving vehicles are designed to eliminate most of the million global road deaths a year, which are a very present and real threat.
What Are the Plans to Address the Problem?
Which potential countermeasures are the best? Solutions include potential cybersecurity risk mitigation plans in the design and manufacturing process since cyber resilience must be effectively implemented in the design phase of the vehicle.
Since no hostile hacker has actually targeted self-driving vehicles so far, no real cybersecurity tests have been run to protect the self-driving software in a realistic setting.
What the Future Holds
Every new generation of automobile technology comes with its own hazards and security risks. Self-driving cars are no exception, and right now we can safely assume that the cybersecurity risks associated with them are somewhat understudied.
Click to expand...

ronjor · Feb 26, 2019

The Dark Sides of Modern Cars: Hacking and Data Collection

Byron V. Acohido February 26, 2019
In less than a decade, amazing driver-assist mechanisms and must-have infotainment systems have swept into the dashboards of many popular car models for sale today. And we’re just at the start of this trend. Connectivity, apps, smartphone integration and autonomous driving are on an upward sweep taking us toward widespread public use of driverless vehicles, just a few years away.
Click to expand...

ronjor · Mar 1, 2019

Your car is more likely to be hacked by your mechanic than a terrorist

March 1, 2019 by Richard Matthews
When it comes to car hacking, you should be more worried about dodgy dealers than one-off hackers with criminal intent.
Hollywood would have us believe our cars are extremely vulnerable to hackers. A hacker remotely logs into the onboard computer of a car on display in a showroom, causing the car to burst through the glass out onto the street – just in the nick of time to block a car chase.
Click to expand...

ronjor · Mar 5, 2019

6 Questions to Ask While Buying a Connected Car

Steve Zurier 3/5/2019
Here are six questions to keep in mind when you walk into the showroom to buy a networked car.
Click to expand...

guest · Mar 8, 2019

Car alarms with security flaws put 3 million vehicles at risk of hijack
March 7, 2019
https://techcrunch.com/2019/03/07/car-alarms-flaw-hijack/

Two popular car alarm systems have fixed security vulnerabilities that allowed researchers to remotely track, hijack and take control of vehicles with the alarms installed.

The systems, built by Russian alarm maker Pandora and California-based Viper — or Clifford in the U.K., were vulnerable to an easily manipulated server-side API, according to researchers at Pen Test Partners, a U.K. cybersecurity company. In their findings, the API could be abused to take control of an alarm system’s user account — and their vehicle.
Click to expand...

ronjor · Mar 13, 2019

Scientists assess risk of hacking multiple self-driving cars in rush hour

Jennifer Ouellette - 3/13/2019
Multiple networks for connected vehicles could mitigate risk of a widespread hack.
Click to expand...

guest · Apr 9, 2019

The Secret is Out: Connected Vehicles are Eminently Hackable
April 9, 2019
https://securityboulevard.com/2019/04/the-secret-is-out-connected-vehicles-are-eminently-hackable/

Modern vehicles contain many features that keep drivers safe—among them the tire pressure monitor, which alerts drivers when their tires need air or other attention. But put those tire pressure monitor sensors (TPMS) on a connected vehicle, and they become a resource that hackers can use to drive vehicles off the road.

For example, an attacker could exploit the TPMS connection to, among other things, send an impossible condition to the Advanced Driver Assistance System (ADAS) ECU, causing a fault that could then be exploited; [...] might even shut down the vehicle and more.

The problems with connected vehicles are similar to those facing all advanced systems that utilize network communications. While anti-malware systems can help prevent attacks against known threats, they aren’t helpful against zero-day threats—and since connected car technology is still developing, many of the attacks are likely to be new ones that we have not seen before. How will we defend against those?
Click to expand...

guest · Apr 17, 2019

Thieves Somehow Stole 100 Car2Go Cars in Chicago
April 18, 2019
https://motherboard.vice.com/en_us/article/wjv8dw/thieves-steal-100-car2go-cars-chicago

Thieves have stolen 100 cars from the car sharing company Car2Go in Chicago using a “mobile app,” according to the Chicago Police Department.

The company also clarified that this was not a “hack,” but did not elaborate about how the cars were stolen. Car2Go offers Smart cars and Mercedes Benz vehicles in Chicago. Normally, the cars are unlocked with an app. We don’t yet know whether the thieves found a vulnerability in the app that allowed them to unlock the cars en masse.
For now, it’s unknown how the thieves were able to unlock and steal cars, which all have GPS trackers on them, as Car2Go’s spokesperson confirmed.
Click to expand...

ronjor · Apr 24, 2019

Hacker Can Monitor Cars And Kill Their Engines After Breaking Into GPS Tracking Apps

by Lorenzo Franceschi-Bicchierai Apr 24 2019, 11:07am
“I can absolutely make a big traffic problem all over the world,” the hacker said.
Click to expand...

ronjor · May 20, 2019

GM will deliver over-the-air updates to 'most' vehicles by 2023

Christine Fisher, @cfisherwrites 20 May 2019
GM says cybersecurity is a "key pillar" of the platform. And, according to Reuters, the company previously said it would not use over-the-air updates for safety-critical systems, like braking. While there are potential safety and security implications, over-the-air updates will likely become standard industry wide as automobile manufacturers and tech companies alike double down on automotive software.
Click to expand...

guest · May 20, 2019

Hackers could stop Tesla cars if drivers leave Bluetooth diagnostics module connected
May 20, 2019
https://www.scmagazineuk.com/hacker...-diagnostics-module-connected/article/1585131

Leaving a Bluetooth diagnostics module connected to a Tesla car could leave it open to hackers, according to security researchers.

Ken Munro, partner and founder of Pen Test Partners, said in a blog post that while Tesla cars don’t have a conventional OBDII port for onboard diagnostics, it has its own diagnostics connector (X427).
"That connector has access to all five CANbuses on the vehicle. Yes really. Sound unwise to anyone?" he said.

"We fuzzed the CAN hard, essentially replicating existing messages but with random length and content. What happened?" he said. "Very quickly we got a LOT of error messages, culminating in the front, then rear motors going offline and then lost all power."
"That’s impressive – other vehicle brands may not have coped so well with the traffic. Brick, anyone? Still quite scary on a fast road / motorway / freeway though."
Click to expand...

ronjor · Jun 4, 2019

GuardKnox raises $21 million to protect vehicles against cyberattacks

Kyle Wiggers@Kyle_L_Wiggers June 4, 2019
GuardKnox, an Israel-based startup developing a suite of cybersecurity products for automotive apps and platforms, today announced that it’s raised $21 million in series A funding led by Fraser McCombs Capital, with participation from Faurecia, Shanghai Automotive’s SAIC Capital, Glory Ventures, NextLeap Ventures, VectoIQ, Plug and Play, Allied, Cybertech, and Kardan LTD. The capital infusion brings GuardKnox’s total raised to $24 million, and cofounder and CEO Moshe Shlisel said it’ll be used to grow GuardKnox’s research and development team and enable it to open subsidiaries in “strategic” locations.
Click to expand...

hawki · Jun 19, 2019

"Tesla Model 3 and Model S are vulnerable to GPS spoofing attacks

Tesla Model S and Model 3 electric cars are vulnerable to cyberattacks aimed at their navigation systems, according to research from Regulus Cyber.

During a test drive using Tesla’s Navigate on Autopilot feature, a staged attack caused the car to suddenly slow down and unexpectedly veer off the main road...

The researchers found that spoofing attacks on the Tesla GNSS (GPS) receiver could easily be carried out wirelessly and remotely, exploiting security vulnerabilities in mission-critical telematics, sensor fusion, and navigation capabilities..."

https://www.helpnetsecurity.com/201...ign=Feed: HelpNetSecurity (Help Net Security)

guest · Jul 2, 2019

Toyota's Car-Hacking Tool Now Available
July 2, 2019
https://www.darkreading.com/analytics/toyotas-car-hacking-tool-now-available/d/d-id/1335121

Toyota officially has begun offering a commercial version of its new Portable Automotive Security Testbed (PASTA) open source testing platform for researchers and nascent car-hacking experts.

The PASTA hardware and software tool product sells for $28,300, including the steel briefcase, so the commercial version isn't necessarily geared for the newbie hobbyist.
PASTA allows researchers to study how a car's engine control units (ECUs) operate, as well as the CAN protocol used for communicating among elements of the vehicle, and to test vulnerabilities and exploits.
Click to expand...

guest · Jul 4, 2019

Kia made a little Faraday cage for electronic keys to protect them from thieves
July 4, 2019
https://www.pocket-lint.com/cars/ne...-electronic-keys-to-protect-them-from-thieves

This is a clever idea. Kia's Faraday cage can protect wireless keys from being hacked. It's just a pouch really, but it could be a rather good idea for those of us (most of us?) who put our keys near the front door. This type of crime has tripled in some areas of the UK in recent years, especially for high-value vehicles.

After all, it's a way in which criminals don't even need to break into your home to retrieve the keys for the vehicle they want to steal. Instead, they use a pair of transmitters which intercept the signal between the car and key inside the house. The car is tricked into thinking that a key is present when, of course, it isn't.

Called KiaSafe and costing £10 (around $13), it blocks the key's wireless signal from interference using a layer of metal inside the pouch.
Click to expand...

Kia - Press Release: Kia hits back at car thieves with extra security step

ronjor · Jul 7, 2019

Here's how hackers are making your Tesla, GM and Chrysler less vulnerable to attack

July 5, 2019 by Dalvin Brown, Usa Today
It was all part of a three-day cybersecurity contest called Pwn2Own, an event where Tesla pays top dollar to anyone masterful enough to find previously unknown bugs. Correcting any weakness helps the electric car company protect the people who drive its vehicles, it hopes.
Click to expand...

Log in or Sign up

Watch remote hackers easily take control of this Jeep and more

hawki Registered Member

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

hawki Registered Member

guest Guest

guest Guest

ronjor Global Moderator

Log in or Sign up

Watch remote hackers easily take control of this Jeep and more

hawki Registered Member

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

hawki Registered Member

guest Guest

guest Guest

ronjor Global Moderator

Useful Searches