ForgeRock identity systems gave researchers remote car access
Researchers found that a vulnerability chain in ForgeRock identity systems let them run code on two automakers’ production servers and unlock connected cars remotely. The work was part of controlled security research, not a criminal campaign, and the issue was fixed within about two hours after both unnamed automakers received the report. ForgeRock attack chain in production systems The investigation started with the Android apps used by vehicle owners. Both…