Subaru’s Starlink Security Snafu: A Hacker’s Delight or Driver’s Dismay?
Subaru’s Starlink system exposed user data and allowed vehicle takeovers. Researchers found that with just an employee email, they could reset passwords and bypass security, accessing sensitive information. The flaw even let them control cars remotely. Subaru fixed the issue within 24 hours after being alerted by security researcher Sam Curry.
Hot Take:
Subaru’s Starlink vulnerability is like leaving the keys in the ignition of a brand new car with a “come and get it” sign taped to it—hackers don’t even need to hotwire! Talk about taking remote control to a whole new level. Looks like Subaru took the term ‘connected car’ a bit too literally!
Key Points:
- Security researchers discovered a major vulnerability in Subaru’s Starlink system.
- The flaw allowed unrestricted access to customer accounts across the US, Canada, and Japan.
- The admin panel was exploitable by resetting employee passwords without a confirmation token.
- Hackers could access vehicle data, modify user permissions, and control vehicle functions remotely.
- Subaru patched the issue within 24 hours of being notified by the researchers.
Already a member? Log in here