Tag Archive for: Unlocks

SiriusXM hack unlocks, starts cars


Curry, who works for New York-based Yuga Labs, a blockchain-based software development company, is known in cybersecurity circles for his interest in automobile telematics.

In September 2022, a hacker reached out to Curry to show him how he had breached Uber’s backend systems and compromised the ride-hailing service’s Amazon and Google-hosted cloud environments where the company stores its source code and customer data.

The automakers and SiriusXM said no mishaps resulted from the potential security breach.

“Honda is aware of a reported vulnerability involving SiriusXM connected vehicle services provided to multiple automotive brands, which, according to SiriusXM, was resolved quickly after they learned of it,” Jessica Fini, a Honda spokeswoman, said in a statement. “Honda has seen no indications of any malicious use of this now-resolved vulnerability to access connected vehicle services in Honda or Acura vehicles.”

In a statement, SiriusXM Connected Vehicle Services said that “the issue was resolved within 24 hours after the report was submitted. At no point was any subscriber or other data compromised, nor was any unauthorized account modified using this method.”

Hyundai spokesman Ira Gabriel told Automotive News that the automaker worked with third-party consultants to investigate the vulnerability as soon as Curry and his team brought the security issues to their attention.

“Importantly, other than the Hyundai vehicles and accounts belonging to the researchers themselves, our investigation indicated that no customer vehicles or accounts were accessed by others as a result of the issues raised by the researchers,” Gabriel said.

To hack a Hyundai, Gabriel said one needed the email address associated with the account, along with the VIN and the script, or code, used by the hackers.

Nevertheless, Hyundai implemented countermeasures within days of notification to further enhance the safety and security of its systems, he said.

Curry told Automotive News that he thought automakers could make their smartphone applications more secure through standardization, but they each take separate approaches in developing their applications.

“This is a really complicated issue, but I’d like to…

Source…

Kingston’s New Encrypted SSD Unlocks Via Touch Screen


Kingston’s latest encrypted external SSD is designed to be as friendly for consumers to use as it is devilish for hackers to try and crack.  The new Kingston IronKey Vault Privacy 80 External SSD VP80ES unlocks like a smartphone, with its intuitive touchscreen, and then enables simple drag-and-drop file transfers. Meanwhile, hackers face a FIPS 197 certified OS-independent device which safeguards against Brute Force attacks and BadUSB with digitally-signed firmware and XTS-AES 256-bit encryption.

Many storage devices you can buy nowadays come with some kind of encryption tools bundled, or if not you can use BitLocker (might be an extra to pay for depending on your version of Windows). However, some of the software is OS specific, or it will require you complete a number of preparatory tasks some users will be tempted to put off until ‘later’. Kingston reckons its IronKey Vault Privacy 80 External SSD VP80ES addresses all these weaknesses, and is a friction free alternative to secure data storage needs for any platform.

Source…

New GandCrab Decryptor Unlocks Files of Updated Ransomware – Threatpost

New GandCrab Decryptor Unlocks Files of Updated Ransomware  Threatpost

Yet another free decryptor is available for GandCrab ransomware victims. The tool, released Tuesday, is the third decryptor update in the past year that thwarts …

“exploit kit” – read more

Microsoft rushes to fix issue that unlocks devices protected by Secure Boot

Secure boot golden key thumb

Microsoft is scrambling to fix an issue that unlocks Windows tablets, phones, and other devices protected by Secure Boot.

David Bisson reports.

Graham Cluley