The affected automaker

New Capabilities

Subject of the research; remediation not stated in the write-up

A security researcher working with Sam Curry found that a number plate could be turned into remote commands for an unnamed automaker’s cars in Australia. The chain ran through public registration data, a subscriber ID, admin credentials embedded in a vendor JavaScript file, and a web-firewall bypass.

Updated Yesterday