Identity platform flaw let researchers open two automaker app accounts
Two car brands' mobile app login systems could be taken over completely after security researchers found a ForgeRock administrator console that still used its default password. The issue let them reach customer records through the identity platform and, in a test on their own and consenting owners' vehicles in the United States, unlock doors and start an engine. How the identity servers were exposed Both brands used ForgeRock, now part…