Commerce Dept. to look at privacy, cyber risks from Chinese-sourced connected vehicle equipment

The investigation looks to discover national security concerns before connected vehicles flood the U.S. market.

The post Commerce Dept. to look at privacy, cyber risks from Chinese-sourced connected vehicle equipment appeared first on CyberScoop.

Continue reading Commerce Dept. to look at privacy, cyber risks from Chinese-sourced connected vehicle equipment

Dangerous vulnerability in fleet management software seemingly ignored by vendor

Researchers say Digital Communications Technologies has not addressed a bug impacting its Syrus4 IoT gateway, leaving open the possibility for vehicle fleets to be shut down.

The post Dangerous vulnerability in fleet management software seemingly ignored by vendor appeared first on CyberScoop.

Continue reading Dangerous vulnerability in fleet management software seemingly ignored by vendor

Car hackers discover vulnerabilities that could let them hijack millions of vehicles

Security researchers spent months diving into vehicles and found multiple vulnerabilities impacting everything from safety to personal data.

The post Car hackers discover vulnerabilities that could let them hijack millions of vehicles appeared first on CyberScoop.

Continue reading Car hackers discover vulnerabilities that could let them hijack millions of vehicles

Ask Hackaday: Does Your Car Need an Internet Killswitch?

Back in the good old days of carburetors and distributors, the game was all about busting door locks and hotwiring the ignition to boost a car. Technology rose up to combat this, you may remember the immobilizer systems that added a chip to the ignition key without which the vehicle …read more

Continue reading Ask Hackaday: Does Your Car Need an Internet Killswitch?

Tesla offers ‘goodwill’ to security researchers hacking its cars

Go ahead and hack that car in peace. In a move greeted happily by cybersecurity researchers around the world, the electric-automobile company Tesla announced that hacking the company’s software as part of “good-faith security research” will not void your warranty. The announcement is part of a “goodwill” revamping of Tesla’s vulnerability disclosure program to allow research without risking legal action, a voided warranty or a broken car — as long as hackers play by the rules. As long as your work complies with our bug bounty policy, Tesla will not void your warranty if you hack our software https://t.co/HhibE1UpRC https://t.co/NIISSrrViD — Tesla (@Tesla) September 5, 2018 “Tesla values the work done by security researchers in improving the security of our products and service offerings,” the company’s vulnerability disclosure page reads. “We are committed to working with this community to verify, reproduce, and respond to legitimate reported vulnerabilities. We encourage the community […]

The post Tesla offers ‘goodwill’ to security researchers hacking its cars appeared first on Cyberscoop.

Continue reading Tesla offers ‘goodwill’ to security researchers hacking its cars

Meet Berla, the little-known company that can pull smartphone data from your car

Late morning on Jan. 7, 2015, a black Citroën C3 arrived in front of Charlie Hebdo’s headquarters at 10 Rue Nicolas-Appert in Paris. Two men stepped out dressed in black, toting Kalashnikov assault rifles and a long list of people to kill. That was the beginning of a historic terrorist massacre and subsequent battle with police that left 12 dead and left much of the world wondering how it happened. Police immediately turned to the digital evidence trail, including the Citroën C3. A French supermini, the C3 is advertised as a “smart car,” meaning it creates mountains of data waiting to be analyzed by anyone who can figure out how to gain access. In order to obtain that evidence, French authorities turned to Berla Corporation, a little-known Maryland-based cybersecurity company that works with and receives funding from the Department of Homeland Security’s Science and Technology Cybersecurity Division. Berla’s flagship product is Project […]

The post Meet Berla, the little-known company that can pull smartphone data from your car appeared first on Cyberscoop.

Continue reading Meet Berla, the little-known company that can pull smartphone data from your car