White hat hacker cracked Toyota's supplier portal
reported that Eaton Zveare, a hobbyist hacker from Florida, found the vulnerability and reported it to Toyota last November. The automaker quickly closed the breach and thanked Zveare but stopped short of paying a bounty, which he said could encourage less upstanding hackers to sell secrets to the black market instead of reporting them. It’s worth noting that Toyota has an existing program for researchers to report vulnerabilities, but it’s unclear if Zveare used it.
Zveare discovered the weakness in Toyota’s supplier portal by generating a web token using a Toyota email address. The system authenticated him without a password, opening the door to all sorts of secret corporate information. All he had to do was search the internet for a valid Toyota email address. Once in, he repeated the access process to take over an email account with system administrator permissions.
Zveare had read-write access to 14,000 Toyota email addresses, and it’s not hard to see how a malicious actor could cause significant issues for Toyota. The good news, at least for customers, is that Zveare’s exploits did not give him access to their personal information. In September last year, another white hat hacker notified the automaker of a vulnerability with the telematics services included in SiriusXM radio functions. Toyota was slow to adopt tech features like Apple CarPlay and Android Auto, citing customer and data privacy, so it’s surprising to see these issues now.
Deutschland Neuesten Nachrichten, Deutschland Schlagzeilen
Similar News:Sie können auch ähnliche Nachrichten wie diese lesen, die wir aus anderen Nachrichtenquellen gesammelt haben.
‘White Lotus’ Creator Mike White to Pen Super Bowl Spot for Cosmetics BrandFrom the Sicilian terraces of the Four Seasons to the asphalt tailgate parties of Phoenix, Emmy-winning writer Mike White is headed to the Super Bowl. The former “Survivor’ contestant a…
Weiterlesen »
Porsche Panameras recalled for potential fire risk - AutoblogPorsche is recalling its Panamera and Panamera Sport Turismo to address a potential issue with its climate control system that can lead to a fire.
Weiterlesen »
Renault, Nissan officially reboot their auto alliance for post-Ghosn era - AutoblogAutomakers Renault and Nissan on Monday formalized the reboot of their relationship, agreeing to fix a disparity that Nissan had long resented.
Weiterlesen »
Mercedes-AMG E 63 S next generation to give up TTV8 for inline-6 PHEV - AutoblogThe next-gen Mercedes-AMG E 63 sedan due in 2024 is expected to use a PHEV inline-six powertrain making around 700 hp and 884 lb-ft.
Weiterlesen »
2023 Lexus RZ 450e electric crossover starts at $59,650 - AutoblogLexus prices the 2023 RZ 450e at $59,650 in entry-level Premium trim. Range is 220 miles on a charge on 18-inch wheels, or 196 miles on 20-inch wheels.
Weiterlesen »
2023 Retromobile Mega Gallery | The Paris show in pictures - AutoblogHeld annually in Paris, the Retromobile show is one of the largest classic-car-only events in the world. Check out the highlights from the 2023 edition.
Weiterlesen »