ForgeRock

New Capabilities

Its OpenIDM product was the identity store in the attack chain

A security researcher working with Sam Curry found that a number plate could be turned into remote commands for an unnamed automaker’s cars in Australia. The chain ran through public registration data, a subscriber ID, admin credentials embedded in a vendor JavaScript file, and a web-firewall bypass.

Updated Yesterday