Choose how you want to continue.
By continuing, you agree to our Privacy Policy.
Hacking Two Automakers via ForgeRock Path Confusion, RCE, and Remote Vehicle Access
Summary
Shubham Shah and Sam Curry explored a security vulnerability in the ForgeRock WAF that enabled remote code execution on identity systems of two automakers, leading to an ability to control vehicles remotely.
MORE POSTS LIKE THIS
security: Impersonating IT support: how threat actors turn a remote session into enterprise-wide access
Sujith Quintelier ·
Sep 3, 2026
Malicious Traffic Routing Stack Exploited to Spread Global Malware
Securityonline ·
Jun 9, 2026
How Cybercriminals Crack Your Passwords (And How to Stay One Step Ahead)
freeCodeCamp.org ·
May 19, 2025
Dry Soup: this holiday season you need to choose a family code word
John Graham-Cumming's blog ·
Nov 10, 2026
AUTHOR