The Security Risks Revealed by Digital License Plates
Research conducted on digital license plates revealed a vulnerability that can allow malicious tracking and customization of license plates.
Blog
New Year Opening Salvo: New OEM Data Breaches
Two automotive manufacturers have fallen prey to possible data breaches in January 2023, reiterating the need for better cybersecurity against these incidents.
Security Insights: EV Manufacturer NIO Discloses Data Breach
NIO reported a recent data breach in its system. The group behind the breach demanded ransom in exchange for not releasing the stolen information.
The Sirius XM Flaw Highlights Hidden Automotive Supply-Chain Risks
Sirius XM’s connected vehicle services put some car brands at risk of remote attacks. While the flaw has been patched, the case underscores the risks to the automotive supply chain.
The Green Light for Secure Connected Cars
In its first annual cybersecurity report, VicOne looks back at the prominent automotive threats in 2022, shares security predictions for the near future, and gives recommendations for securing the road ahead for connected cars.
VicOne’s Security Assessment Tool Supports SOAFEE’s Security-Driven SDV
VicOne’s security assessment tool, which is equipped with its own attack simulator, can help OEMs and suppliers ensure security from the design phase and prepare for future threats.
OpenSSL Releases Official Advisory to Address Buffer Overflow Vulnerabilities
OpenSSL, a widely used open-source cryptography library, has released OpenSSL version 3.0.7 to address CVE-2022-3786 and CVE-2022-3602, which affect versions 3.0.0 to 3.0.6.
Putting the Brakes on Remote Attacks: The Importance of On-Board IDPS
An on-board intrusion detection and prevention system (IDPS) protects a connected vehicle by enabling it to detect electronic control unit (ECU)-level attacks and then respond to each in real-time.
Uber Says Lapsus$ Behind Recent Cybersecurity Incident
Uber links last week’s multifactor authentication (MFA) fatigue attack to the hacker group Lapsus$.
Securing the Automotive Supply Chain Through Software and Vulnerability Management
The automotive supply chain faces many hurdles ahead, from complying with new regulations to dealing with vulnerabilities and preparing for threats on the horizon. How can it equip itself to handle these challenges?
Uncovering Log4j Vulnerabilities in Connected Cars
Log4Shell was a critical flaw found in Apache Log4, a widely used Java-based logging library. In this entry, we discuss how this severe vulnerability could impact connected cars and how to better prepare for similar imminent threats.
August 2022 Automotive Security Discoveries
August saw the release of several studies on the flaws in different connected vehicle components, which highlighted the trade-off between convenience and security.
A Cybersecurity Framework Built for the Future of the Automotive Industry
The automotive industry is at a decisive moment. Growth is in its future, but so are potential risks. What kind of cybersecurity framework do manufacturers need to support them in navigating the path ahead?
