Monday, 11 August, 2025
Critical Flaw in Carmaker’s Web Portal Could Allow Hackers to Unlock and Track Cars Remotely

A security researcher discovered a major vulnerability in an unnamed automaker’s online dealership portal that enabled the creation of an admin account with "unfettered access" to customer data and vehicle controls. Through this loophole, hackers could remotely track cars, unlock doors, and enroll users in features—all without alerting owners. The exposure highlights systemic weaknesses in automotive web security and the need for urgent audits across the industry.
Read full story at TechCrunch