Commerce Dept. to look at privacy, cyber risks from Chinese-sourced connected vehicle equipment

The investigation looks to discover national security concerns before connected vehicles flood the U.S. market.

The post Commerce Dept. to look at privacy, cyber risks from Chinese-sourced connected vehicle equipment appeared first on CyberScoop.

Continue reading Commerce Dept. to look at privacy, cyber risks from Chinese-sourced connected vehicle equipment

Dangerous vulnerability in fleet management software seemingly ignored by vendor

Researchers say Digital Communications Technologies has not addressed a bug impacting its Syrus4 IoT gateway, leaving open the possibility for vehicle fleets to be shut down.

The post Dangerous vulnerability in fleet management software seemingly ignored by vendor appeared first on CyberScoop.

Continue reading Dangerous vulnerability in fleet management software seemingly ignored by vendor

Car hackers discover vulnerabilities that could let them hijack millions of vehicles

Security researchers spent months diving into vehicles and found multiple vulnerabilities impacting everything from safety to personal data.

The post Car hackers discover vulnerabilities that could let them hijack millions of vehicles appeared first on CyberScoop.

Continue reading Car hackers discover vulnerabilities that could let them hijack millions of vehicles

Ask Hackaday: Does Your Car Need an Internet Killswitch?

Back in the good old days of carburetors and distributors, the game was all about busting door locks and hotwiring the ignition to boost a car. Technology rose up to combat this, you may remember the immobilizer systems that added a chip to the ignition key without which the vehicle …read more

Continue reading Ask Hackaday: Does Your Car Need an Internet Killswitch?

Tesla offers ‘goodwill’ to security researchers hacking its cars

Go ahead and hack that car in peace. In a move greeted happily by cybersecurity researchers around the world, the electric-automobile company Tesla announced that hacking the company’s software as part of “good-faith security research” will not void your warranty. The announcement is part of a “goodwill” revamping of Tesla’s vulnerability disclosure program to allow research without risking legal action, a voided warranty or a broken car — as long as hackers play by the rules. As long as your work complies with our bug bounty policy, Tesla will not void your warranty if you hack our software https://t.co/HhibE1UpRC https://t.co/NIISSrrViD — Tesla (@Tesla) September 5, 2018 “Tesla values the work done by security researchers in improving the security of our products and service offerings,” the company’s vulnerability disclosure page reads. “We are committed to working with this community to verify, reproduce, and respond to legitimate reported vulnerabilities. We encourage the community […]

The post Tesla offers ‘goodwill’ to security researchers hacking its cars appeared first on Cyberscoop.

Continue reading Tesla offers ‘goodwill’ to security researchers hacking its cars