Alien Top
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
pdxfed@lemmy.world to Cybersecurity@sh.itjust.worksEnglish · 14 hours ago

2 Carmakers left a hidden admin console on their login servers with its factory-default password. Researchers used it to take over any owner's account, then locate, unlock and start their car.

samcurry.net

external-link
message-square
19
link
fedilink
184
external-link

2 Carmakers left a hidden admin console on their login servers with its factory-default password. Researchers used it to take over any owner's account, then locate, unlock and start their car.

samcurry.net

pdxfed@lemmy.world to Cybersecurity@sh.itjust.worksEnglish · 14 hours ago
message-square
19
link
fedilink
Hacking Two Automakers: ForgeRock Path Confusion, RCE, and Remote Vehicle Access
samcurry.net
external-link
Shubham Shah and Sam Curry chained a ForgeRock WAF bypass into code execution on the identity systems of two automakers, then demonstrated remote vehicle control in the US.

cross-posted from: https://piefed.world/c/tech/p/1522408/2-carmakers-left-a-hidden-admin-console-on-their-login-servers-with-its-factory-default

  • zod000@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    3
    ·
    4 hours ago

    I want a “dumb” car even more than I want a “dumb” TV or phone.

Cybersecurity@sh.itjust.works

cybersecurity@sh.itjust.works

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@sh.itjust.works

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

  • Be respectful. Everyone should feel welcome here.
  • No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
  • No Ads / Spamming.
  • No pornography.

Community Rules

  • Idk, keep it semi-professional?
  • Nothing illegal. We’re all ethical here.
  • Rules will be added/redefined as necessary.

If you ask someone to hack your “friends” socials you’re just going to get banned so don’t do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 256 users / day
  • 223 users / week
  • 762 users / month
  • 3.89K users / 6 months
  • 1 local subscriber
  • 10.8K subscribers
  • 5.1K Posts
  • 6.94K Comments
  • Modlog
  • mods:
  • Kid@sh.itjust.works
  • Lanky_Pomegranate530@midwest.social
  • BE: 0.19.17
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org