Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars
· thehackernews.com · popularity 21/100 · 0 similar stories today · Cybersecurity (Technology & Consumer Electronics)
Read the original at thehackernews.com →
Summary
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the engine. Both apps signed customers in through ForgeRock, an identity platform now part of Ping Identity, and on those servers the researchers reached an
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 2.