In an era where cars can be rented via apps, security can take a backseat in favor of convenience. What do recent data breaches in the automotive sector tell us about personal data and the risk of fraud?
VicOne showcased its smart cockpit cybersecurity solution at CES, one of the world’s most influential tech events.
In 2022, the automotive industry faced security challenges in its supply chain and saw signs of more complex attacks on the horizon. In 2023 and beyond, will vulnerability management and a software bill of materials (SBOM) be enough to mitigate future risks?
In its report “Market Trend: Connected and Autonomous Vehicle Data Enhances Software Life Cycle Management Transformation,” Gartner<sup>®</sup> mentions VicOne.
Research conducted on digital license plates revealed a vulnerability that can allow malicious tracking and customization of license plates.
Two automotive manufacturers have fallen prey to possible data breaches in January 2023, reiterating the need for better cybersecurity against these incidents.
NIO reported a recent data breach in its system. The group behind the breach demanded ransom in exchange for not releasing the stolen information.
Sirius XM’s connected vehicle services put some car brands at risk of remote attacks. While the flaw has been patched, the case underscores the risks to the automotive supply chain.
In its first annual cybersecurity report, VicOne looks back at the prominent automotive threats in 2022, shares security predictions for the near future, and gives recommendations for securing the road ahead for connected cars.
VicOne’s security assessment tool, which is equipped with its own attack simulator, can help OEMs and suppliers ensure security from the design phase and prepare for future threats.
OpenSSL, a widely used open-source cryptography library, has released OpenSSL version 3.0.7 to address CVE-2022-3786 and CVE-2022-3602, which affect versions 3.0.0 to 3.0.6.
An on-board intrusion detection and prevention system (IDPS) protects a connected vehicle by enabling it to detect electronic control unit (ECU)-level attacks and then respond to each in real-time.
Uber links last week’s multifactor authentication (MFA) fatigue attack to the hacker group Lapsus$.