The Sirius XM Flaw Highlights Hidden Automotive Supply-Chain Risks
Sirius XM’s connected vehicle services put some car brands at risk of remote attacks. While the flaw has been patched, the case underscores the risks to the automotive supply chain.
Blog
The Green Light for Secure Connected Cars
In its first annual cybersecurity report, VicOne looks back at the prominent automotive threats in 2022, shares security predictions for the near future, and gives recommendations for securing the road ahead for connected cars.
VicOne’s Security Assessment Tool Supports SOAFEE’s Security-Driven SDV
VicOne’s security assessment tool, which is equipped with its own attack simulator, can help OEMs and suppliers ensure security from the design phase and prepare for future threats.
OpenSSL Releases Official Advisory to Address Buffer Overflow Vulnerabilities
OpenSSL, a widely used open-source cryptography library, has released OpenSSL version 3.0.7 to address CVE-2022-3786 and CVE-2022-3602, which affect versions 3.0.0 to 3.0.6.
Putting the Brakes on Remote Attacks: The Importance of On-Board IDPS
An on-board intrusion detection and prevention system (IDPS) protects a connected vehicle by enabling it to detect electronic control unit (ECU)-level attacks and then respond to each in real-time.
Uber Says Lapsus$ Behind Recent Cybersecurity Incident
Uber links last week’s multifactor authentication (MFA) fatigue attack to the hacker group Lapsus$.
Securing the Automotive Supply Chain Through Software and Vulnerability Management
The automotive supply chain faces many hurdles ahead, from complying with new regulations to dealing with vulnerabilities and preparing for threats on the horizon. How can it equip itself to handle these challenges?
Uncovering Log4j Vulnerabilities in Connected Cars
Log4Shell was a critical flaw found in Apache Log4, a widely used Java-based logging library. In this entry, we discuss how this severe vulnerability could impact connected cars and how to better prepare for similar imminent threats.
August 2022 Automotive Security Discoveries
August saw the release of several studies on the flaws in different connected vehicle components, which highlighted the trade-off between convenience and security.
A Cybersecurity Framework Built for the Future of the Automotive Industry
The automotive industry is at a decisive moment. Growth is in its future, but so are potential risks. What kind of cybersecurity framework do manufacturers need to support them in navigating the path ahead?
Shifting Lanes: Riding Taiwan’s First Self-Driving Bus
Taiwan’s first self-driving bus hit the road in 2020. Although it was only a trial run, it showed tremendous promise and highlighted potential threats for autonomous vehicle technologies in the not-so-distant future.
Driven Toward Safety: Updates on the UN R155 Enforcement
The enforcement of the UN Regulation No. R155 (UN R155) in July 2022 entails cybersecurity requirements that are binding in all UNECE member countries. To comply with and stay updated on the latest security requirements, OEMs and Tier 1 suppliers must rely on comprehensive cybersecurity solutions.
VicOne Among CRN’s List of Coolest Cybersecurity Products in 2022
CRN® names VicOne as one of the top 11 coolest cybersecurity tools and products of 2022, highlighting the growing market for cybersecurity in the world of connected cars..