Yuga Labs security researchers discovered serious vulnerabilities in Hyundai’s mobile apps and a smart vehicle platform used by multiple carmakers, both of which allowed hackers to remotely control several features.
The first issue was related to the MyHyundai and MyGenesis apps, which allow authenticated users to start, stop, lock, or unlock their vehicles.They discovered that the apps’ user validation was performed using the email address, included in the JSON body of POST requests.The researchers created a new account using their target’s email address with a control character added at the end.
After gaining access to an existing legitimate user’s account this way, they could use the app to unlock a Hyundai car that formed part of their experiment. The second major vulnerability was picked up in the SiriusXM vehicle telematics software used by over 15 car manufacturers — including BMW, Honda, Hyundai, Jaguar, Land Rover, Lexus, Nissan, Subaru, and Toyota.After analysing the network traffic generated by Nissan’s app, the researchers discovered they could send forged HTTP requests to the endpoint with only the target’s vehicle identification number .
South Africa Latest News, South Africa Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Snyman: 'Serious discussion' paid off for BlitzboksThe Blitzboks bounced back in dramatic fashion with back-to-back Pool A wins at the Dubai Sevens on Friday, to finish top of the group and secure a quarterfinal sport against Samoa on Saturday.
Read more »
13 top non-fiction titles for serious holiday reading | LifeThe three recent accounts of state capture and corruption should be at the top of a serious South African’s list of books to read. And then there are the top-selling titles of the moment, with Faf du Plessis’s Faf: Through Fire obviously having a great appeal for sports-lovers.
Read more »
ABB to pay R2.5bn in punitive reparations to SA for corrupt Eskom dealABB to pay R2.5bn in punitive reparations to SA for corrupt Eskom deal - The money will be used to improve South Africa’s ability to fight serious corruption
Read more »
30 years into democracy, fronting practices still an issue in SA – BEE Chamber | The Citizen💰30 years into SA's democracy 🇸🇦 fronting practices in BBBEE are still widely practiced, threatening transformation. Catch up on the story here: BBBEE BEE AffirmativeAction
Read more »
ABB to pay R2.5bn in punitive reparations to SA for corrupt Eskom dealABB to pay R2.5bn in punitive reparations to SA for corrupt Eskom deal: The money will be used to improve South Africa’s ability to fight serious corruption
Read more »