Connected vehicles from two major automakers let hackers remotely unlock doors and start engines
Two security researchers found flaws in early 2026 in the vehicle connectivity backends of two major automakers that allowed remote door unlocking and engine starting on any net-connected car. The vulnerabilities stemmed from basic mistakes such as hard-coded admin credentials and bypassed MFA in server APIs; both automakers patched them quickly. The flaws also exposed vehicle location, mileage, f