Two Car Hacks – Daily Security Byte

The week has barely begun and there are already two car-related hacks in the news. First, a group of Chinese security researchers found a cheaper way hack a car key’s wireless communications. While these electronic theft techniques existed before, this research lowers the bar for digital car criminals. Next, a group of Israeli researchers found vulnerabilities in the Bosch’s Drivelog Connector; a third-party device you can plug into your car. If you use this device, attackers could remotely kill your car’s engine. Watch the video for more details, and check out the references below.

Episode Runtime: 3:59

Direct YouTube Link: https://www.youtube.com/watch?v=X4zVPEozBeg

EPISODE REFERENCES:

• Qihoo 360 researchers make electronic car theft cheaper – Wired
• Researchers remotely stop a car’s engine via 3rd party dongle – Computer World
• Original researcher’s post on the Bosch Drivelog Connector flaws – Argus Security
• Security advisory on Bosch Drivelog Connector vulnerabilities – Bosch

Corey Nachreiner, CISSP (@SecAdept)