Subaru STARLINK Flaw Lets Hackers Remotely Control Cars, Access PII

Security researchers discovered a critical vulnerability in Subaru's STARLINK connected car service. Attackers, knowing only a victim's last name and zip code, email, or license plate, could remotely start, stop, lock, unlock, and track vehicles. They could also access a year's worth of location history and retrieve sensitive personal information (address, billing details, etc.). The vulnerability allowed complete vehicle control and was patched within 24 hours. This highlights the critical need for enhanced security in connected car systems and robust user data protection.