GoKawiilResearchers find flaw letting attackers unlock cars from major automaker's connected platform
A security researcher, working with Sam Curry, reverse-engineered the mobile app for a major automaker's connected-car system and traced its network calls to a backend telematics domain. Investigating that infrastructure, they identified an administrative tool and related systems that could potentially be abused to remotely unlock vehicles without authorization.