While car hacking is hardly new, in a blog post published April 3, Ken Tindell, CTO of Canis Automotive Labs, described how attackers manipulated an electronic control unit (ECU) in a Toyota RAV4's headlight to gain access to its CAN bus, through which they were able to, ultimately, steal the vehicle
https://kentindell.github.io/2023/04/03/can-injection/
That's an approach that hasn't been seen before
@danielbsmith yup
that would be the take away "it's going to get worse"
@ecksmc So it finally happened. The possibility has been floating around in the computer security industry for a couple of years or so.
There's no good mitigation, BTW. Car manufacturers didn't take the warnings by security leaders seriously. Everything is on the one bus so if you know what you're doing it's a easy hack and virtually every car is vulnerable. It's going to get a lot worse.