The many ways electric cars are vulnerable to hacks, and whether that matters in a real-world
Summary: At Pwn2Own in Tokyo, part of the Automotive World conference, researchers found 49 zero-day vulnerabilities across cars and electric car products, including a two-vulnerability exploit chain that could let an attacker take over a Tesla's onboard infotainment system. Car and charging companies offered a combined $1 million in bug bounty payments, and other vulnerabilities were found in ChargePoint and Juicebox charging equipment, with the Zero Day Initiative reporting one researcher executed an attack against the ChargePoint Home Flex.
What's compelling: Tesla said none of the bugs found would be more than an annoyance to the driver, but the same event surfaced flaws in home and commercial chargers from ChargePoint and Juicebox - equipment that sits inside homes and businesses and, unlike a car, is rarely on anyone's patch schedule.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026