The vulnerabilities were quickly fixed, and they pertained to a handful of belief-begging security issues with multiple server APIs that their respective mobile applications use.
This alone was enough to grant Shah the ability to pull up customer information with API keys that were hard-coded into said JavaScript.
From thereon, they found "getUser", and correctly guessed that they could retrieve users' information with their email, phone, and ID.
As it turns out, even that too was misconfigured, as the Australian environment would let users skip MFA entirely.
Then, it was as simple as sending out an API request for the "door-unlock" command, and sure enough, the test car promptly opened.
3h ago · via tomshardware.com
That's how many cars BYD sold in Europe through September, according to data published by the European Automobile Manufacturers' Association (ACEA).
In a statement to Reuters, the company said: "BYD Europe does not make such data available to BYD entities or third parties in China."
For now, none of this amounts to an EU-wide ban on BYD vehicles, and private owners have no reason to expect immediate changes.
Chinese Automakers Now Hold An 11.1% Share Of Europe's Market But BYD isn't the only Chinese automaker gaining ground in Europe.
SAIC Motor isn't far behind, with 272,251 cars sold through September, giving it a 2.6 percent market share.
3h ago · via motor1.com
Maeil Business(MK) provides these translations "as they are" and makes no warranties of any kind, either explicitly or implicitly, regarding accuracy, reliability and marketability, suitability for a particular purpose, etc.
of translation.
Please be informed that the content provided may not be translated accurately due to limitations in machine translation before using this service.
5h ago · via mk.co.kr
Uber announced Uber Parking, a feature that lets users find, reserve and pay for a parking space without leaving the platform best known for summoning rides.
Uber Parking Moves From Acquisition to Product The launch turns a corporate purchase into a consumer-facing tool.
Users tap a new Parking icon in the Uber app, enter a destination along with a date and time, and browse an interactive map of available spots.
Uber announced its agreement to acquire the company earlier this year, and Uber CEO Dara Khosrowshahi described the move as making parking “a natural part of the Uber platform.”
What Uber Parking Means for Drivers and the Industry In the near term, Uber Parking offers drivers in 15 cities a way to secure a space before leaving home, with payment and entry handled digitally.
12h ago · via autoconnectedcar.com
A collaborative European research project has begun to bring together data from operational tests, connected vehicles, infrastructure and traffic systems.
FUSE4CCAM – Federated Unified Services advancing next generation Data Exchange for CCAM – is developing a common European framework for data exchange.
These include Sweden’s Safer Vehicle and Traffic Safety Centre at Chalmers, TNO, Monotch, RWTH Aachen, DLR, IDIADA, AVL, Yunex Traffic, the City of Hamburg and Valeo.
FUSE4CCAM aims to develop the CCAM Data Exchange Platform (CCAM-DEP), which is designed “to connect existing and emerging data-space initiatives rather than create another isolated ecosystem”.
It will also address two key issues: real-time data exchange and access to high-quality datasets for AI training and validation.
13h ago · via itsinternational.com
A navigation app displayed on a car’s screen doesn’t necessarily store its information in the vehicle.
In that arrangement, navigation history and saved destinations may remain associated with the phone or the navigation account rather than the vehicle’s built-in system.
The Federal Trade Commission has warned consumers that vehicle electronics can retain personal information, including navigation destinations, phone contacts, app login information, and garage door codes.
Look for settings labeled Navigation, Destinations, Favorites, Personal Information, Privacy, or Recent Searches.
Consumer Reports recommends checking individual system menus and manufacturer accounts when clearing a vehicle’s personal information.
20h ago · via aol.com
Security researchers discovered vulnerabilities in the online systems of two unnamed automobile manufacturers that allowed them to take over customer accounts and remotely unlock and start connected vehicles.
Both automakers reportedly fixed the affected systems within approximately two hours of receiving the researchers’ reports.
The findings revealed how weaknesses in the systems supporting connected-car mobile applications could allow unauthorised access to customer accounts and vehicle controls without directly compromising the vehicles.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders How Did a Default Password Expose Connected Cars?
Automakers Fix Vulnerabilities After Security Disclosure The affected US systems were reportedly secured within approximately two hours of the researchers notifying the automakers.
1d ago · via the420.in
Lotte Non-Life Insurance said on November 9 that it will become the first company in the industry to launch a “Parking-Day Discount Rider,” offering premium discounts of up to 15% based on the number of days a vehicle is not driven.
The rider reflects customers’ actual vehicle-use patterns in their premiums based on the number of days their cars are parked.
It is designed to reduce the premium burden for customers who drive infrequently, such as those who commute by public transportation or use their cars only on weekends.
The rider can be combined with the existing mileage-based discount rider.
Customers using connected cars can also receive discounts under the connected-car discount rider and the connected driving-score discount rider.
1d ago · via asiae.co.kr
Researchers Kushal Khemani and Anjum Nazir Qureshi have introduced an artificial intelligence architecture that predicts connected vehicle maintenance needs by fusing external environmental signals with internal vehicular diagnostics.
Telemetry is collected from the vehicle controller area network via standard on-board diagnostics interfaces, capturing nine internal mechanical metrics including engine coolant temperature, manifold absolute pressure, vehicle speed, fuel trim, tire pressure, battery state, and brake wear indicators.
Operating exclusively on internal mechanical telemetry yielded an F1-score of 0.807, representing a 0.049-point deficit compared to full contextual fusion.
Conversely, removing internal mechanical signals caused performance to plummet by 0.201 to 0.655, confirming that internal mechanical measurements remain the indispensable core of failure prediction.
AI-driven predictive maintenance for connected vehicles using environmental context integration evaluated through simulation benchmarking and field validation.
1d ago · via bioengineer.org
When you buy a Slate Truck, you only pay for the tech you want, and Slate is taking that idea pretty far.
Slate offers that connection as a separate $275 Telematics Module.
It's important to understand the difference between Slate's app and its Telematics Module.
The Telematics Module makes the most sense for owners who want to access their Slate remotely.
The optional module will enable the truck to exchange information, though Slate hasn't specified what data the module will send or store.
1d ago · via engadget.com
In connected car news are Ford, PATEO, NVIDIA, ByteDance, Aeva, AiDEN Auto, Volvo Trucks, NOVOSENSE, Sasken, Amazon, Grubhub, Uber Eats, Valeo and BlackBerry.
Ford Draws a Line on Driver Data Ford Motor Company has published what it calls a “Privacy Promise,” a formal set of commitments on how it handles data from connected vehicles.
Amazon Swaps Grubhub for Uber Eats Amazon has teamed up with Uber Eats to offer restaurant delivery inside Amazon.com and the Amazon Shopping app in nearly 10,000 American cities and towns.
Delivery is free on restaurant orders of $25 or more, and customers get Amazon push notifications along with Uber Eats order tracking.
It combines Valeo’s camera hardware and its full driver-assistance software with the QNX operating system running directly on the chip.
1d ago · via autoconnectedcar.com
In autonomous and self-driving vehicle news are TIER IV, ZF Aftermarket, Zoox, Humble Robotics, May Mobility and Forterra.
TIER IV Bets on a Hybrid Autoware 2.0 TIER IV, working with the Autoware Foundation, has laid out a multi-tier roadmap for Autoware 2.0, the next version of its open-source autonomous driving software.
Executives from the four companies plan to present the roadmap at Automotive Software Strategies US 2026 in San Jose, Calif., where Christian John, president of TIER IV North America, will lead the session.
Zoox Gets a Seat at the Las Vegas Grand Prix Zoox, the autonomous vehicle company owned by Amazon, has signed a multi-year deal to become the official autonomous ride-hail partner of the Formula 1 Heineken Las Vegas Grand Prix.
Its answer is a clean-sheet Class 8 truck, the Humble Hauler, that pairs an electric chassis designed for the purpose with native autonomous driving software.
1d ago · via autoconnectedcar.com
Input 2026-11-08 13:29:44 Updated 2026-11-08 13:29:44 [Financial News] LG Electronics has demonstrated its competitiveness in automotive electronics by earning the highest rating under the international standard for automotive functional safety with its vehicle communication control module.
LG Electronics is the first to receive the highest rating from the agency for a vehicle communication control module.
The vehicle communication control module is a key device that connects multiple electronic control units (ECUs) inside a vehicle and transmits various data, including vehicle status information and control commands.
Having secured functional safety for a product used in mass-production vehicles, LG Electronics plans to expand its automotive electronics business portfolio, including vehicle communication solutions, for global automaker customers.
1 position in the global telematics market, LG Electronics is also accelerating the development of vehicle communication technologies.
Nov 8, 2026 · via en.fnnews.com
LG Electronics has obtained the highest-grade certification of the international functional safety standard for automobiles with its vehicle communication control module.
It is the first in the industry for a vehicle communication control module to receive the top-grade certification.
A vehicle communication control module connects multiple electronic control units (ECUs) inside a vehicle and delivers vehicle status information and control commands to the necessary devices.
LG Electronics plans to use this certification as a springboard to expand its automotive electronics business, including vehicle communication solutions, to global automakers.
Meanwhile, LG Electronics is advancing its vehicle communication solutions based on technological capabilities secured in telematics (in-vehicle wireless communication).
Nov 8, 2026 · via biz.chosun.com
A Consumer Reports investigation last year revealed your car may be collecting data about how you drive.
Now, a new study using Consumer Reports' own vehicles shows where some of that data is going, and you might be surprised how it could be connected back to you.
But unbeknownst to you, your car and its connected apps may be double agents, spying on you and sending what they learn to some of the world's biggest tech companies.
Several automakers told CR that drivers opt in and that some apps take users to external websites that can collect data.
Check your automaker's website or connected app to opt out of data sharing or delete your data.
Nov 7, 2026 · via wcvb.com
The global Passenger Vehicle Telematics Market is entering a structural phase in which value migrates from hardware modules toward integrated data services, analytics, and platform software.
Market Outlook (2026-2035) In the baseline scenario, IndexBox estimates a 8.1% compound annual growth rate for the global passenger vehicle telematics market over 2026-2035, bringing the market index to roughly 218 by 2035 (2025=100).
For full methodological details and benchmark tables, see the latest IndexBox Passenger Vehicle Telematics market report.
This report is an independent strategic market study that provides a structured, commercially grounded analysis of the global market for Passenger Vehicle Telematics.
What this report is about At its core, this report explains how the market for Passenger Vehicle Telematics actually functions.
Nov 6, 2026 · via indexbox.io
Connected vehicles are increasingly connected to mobile apps, cloud services, charging networks and other online platforms.
Common Cybersecurity Risks Outdated vehicle software Modern vehicles rely on software for infotainment, navigation, charging and connected services.
Risks from connected services The security of a connected vehicle also depends on mobile apps, cloud platforms, charging networks and other service providers.
Eight Practical Steps for Vehicle Owners Keep vehicle software up to date Install official software, firmware, infotainment, navigation and mobile app updates promptly.
Consider cybersecurity before buying Before purchasing a new or used connected vehicle, ask: How long will security and software updates be provided?
Nov 6, 2026 · via hkcert.org
Usage-Based Insurance (UBI) will be available to owners of all compatible Bluelink-equipped Hyundai cars who have insurance renewals through Hyundai India Insurance Broking (HIIB) coming up within an eligibility window.
UBI works by assigning car owners a score based on how the car has been driven within the preceding three-month period.
Hyundai India has announced three initial partners for the first phase of this scheme: Cholamandalam MS General Insurance, Go Digit General Insurance, and ICICI Lombard General Insurance.
The scheme could help Hyundai India achieve its recently announced target of 10 lakh connected car sales by 2027.
Bluelink is a set of connected-car features available on higher-end trims of Hyundai cars.
Nov 6, 2026 · via ackodrive.com
The Indian Computer Emergency Response Team has issued an advisory warning of multiple security vulnerabilities in Tata Motors’ connected vehicle mobile applications, iRA 2.0 and iRA.ev.
Tata Motors stated on November 5 that all identified issues have been remediated through software updates rolled out across August and September 2026.
CERT-In Warns of User Impersonation and Remote Exploitation According to the CERT-In assessment, the detected vulnerabilities in the iRA and iRA.ev smartphone applications exposed critical communication pathways to potential exploitation.
Carmaker Confirms Security Patches Released in August and September Responding to the advisory, Tata Motors issued a formal statement on November 5 clarifying that the vulnerabilities highlighted by the agency had already been identified and rectified.
Emphasizing preventative digital hygiene, authorities noted that consumers must install the latest versions of the iRA and iRA.ev applications on their smartphones, warning that running outdated software builds could leave systems exposed to known security vulnerabilities.
Nov 6, 2026 · via the420.in
OnStar AI will launch on the 2027 Cadillac Lyriq EV, then roll out on the 2027 Chevy Silverado and GMC Sierra, with more models to follow.
The introduction of OnStar AI is “one of the first ways customers will experience” broader changes to OnStar, according to Wahlstrom.
For now, the OnStar AI assistant will be available for free as part of OnStar’s standard connectivity package.
Anna Santos, GM’s director of product management for voice and AI/ML, told us that product planners see OnStar AI as relevant for all of GM’s customers.
Not your grandpa’s GM GM’s pitch also targeted investors with the message that GM deserves to be valued like a tech company.
Nov 6, 2026 · via marketingbrew.com