Security Insights: EV Manufacturer NIO Discloses Data Breach
December 23, 2022NIO reported a recent data breach in its system. The group behind the breach demanded ransom in exchange for not releasing the stolen information.
VicOneThe Sirius XM Flaw Highlights Hidden Automotive Supply-Chain Risks
December 16, 2022Sirius XM’s connected vehicle services put some car brands at risk of remote attacks. While the flaw has been patched, the case underscores the risks to the automotive supply chain.
VicOneThe Green Light for Secure Connected Cars: VicOne’s 2022 Automotive Cybersecurity Report
November 29, 2022In its first annual cybersecurity report, VicOne looks back at the prominent automotive threats in 2022, shares security predictions for the near future, and gives recommendations for securing the road ahead for connected cars.
VicOneVicOne’s Security Assessment Tool Supports SOAFEE’s Security-Driven SDV
November 24, 2022VicOne’s security assessment tool, which is equipped with its own attack simulator, can help OEMs and suppliers ensure security from the design phase and prepare for future threats.
VicOneOpenSSL Releases Official Advisory to Address Buffer Overflow Vulnerabilities
November 17, 2022OpenSSL, a widely used open-source cryptography library, has released OpenSSL version 3.0.7 to address CVE-2022-3786 and CVE-2022-3602, which affect versions 3.0.0 to 3.0.6.
VicOnePutting the Brakes on Remote Attacks: The Importance of On-Board IDPS
November 10, 2022An on-board intrusion detection and prevention system (IDPS) protects a connected vehicle by enabling it to detect electronic control unit (ECU)-level attacks and then respond to each in real-time.
Peter YangUber Says Lapsus$ Behind Recent Cybersecurity Incident
September 23, 2022Uber links last week’s multifactor authentication (MFA) fatigue attack to the hacker group Lapsus$.
VicOneSecuring the Automotive Supply Chain Through Software and Vulnerability Management
September 15, 2022The automotive supply chain faces many hurdles ahead, from complying with new regulations to dealing with vulnerabilities and preparing for threats on the horizon. How can it equip itself to handle these challenges?
Terence WangUncovering Log4j Vulnerabilities in Connected Cars
September 13, 2022Log4Shell was a critical flaw found in Apache Log4, a widely used Java-based logging library. In this entry, we discuss how this severe vulnerability could impact connected cars and how to better prepare for similar imminent threats.
VicOneAugust 2022 Automotive Security Discoveries
September 2, 2022August saw the release of several studies on the flaws in different connected vehicle components, which highlighted the trade-off between convenience and security.
VicOneA Cybersecurity Framework Built for the Future of the Automotive Industry
August 26, 2022The automotive industry is at a decisive moment. Growth is in its future, but so are potential risks. What kind of cybersecurity framework do manufacturers need to support them in navigating the path ahead?
Max ChengShifting Lanes: Riding Taiwan’s First Self-Driving Bus
August 10, 2022Taiwan’s first self-driving bus hit the road in 2020. Although it was only a trial run, it showed tremendous promise and highlighted potential threats for autonomous vehicle technologies in the not-so-distant future.
VicOne