Car owners, are you sitting down? Cybersecurity researchers recently reported a flaw in a website — operated by automaker Kia — that enabled them to remotely control key functions of millions of cars.
The full report, published on the personal blog of Sam Curry — one of the researchers — offers a timeline of how the team discovered the exploit and how they managed to utilize it to break into cars.
Also: Android Automotive receives new QOL update, including support for Bluetooth headphones
In June, the researchers found vulnerabilities affecting “Kia vehicles that allowed remote control over key functions using only a license plate.” Their report reveals they were able to remotely track a car’s location, unlock its doors, honk the horn, and start the engine. On certain Kia models, they were even able to activate the camera from a distance.
The researchers told Wiredthis exploit was accessed through a “flaw in a web portal operated” by …