569 matches found
Don’t Put It on the Internet: Tesla Backup Gateway Edition
Derek Abdine, formerly Director of Rapid7 Labs, now CTO at Censys, contributed this blog post. This blog post aims to increase user awareness of the privacy and security risks of connecting devices to the internet. In this edition, we address Tesla Backup Gateways and identify some key areas wher...
tesla.site123.me Cross Site Scripting vulnerability OBB-1478513
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Agent Tesla Botnet Cross Site Scripting
Exploit Title: Agent Tesla Botnet - Cross Site Scripting Vulnerability Google Dork: n/a Date: 29/10/2020 Exploit Author: n4pst3r Vendor Homepage: unkn0wn Software Link: http://www.agenttesla.com/ ¡ Down ! Version: unkn0wn Tested on: Windows 10, debian 7 CVE : n/a Vuln-Code:...
Split-Second ‘Phantom’ Images Can Fool Tesla’s Autopilot
Researchers found they could stop a Tesla by flashing a few frames of a stop sign for less than half a second on an internet-connected billboard...
2017 Tesla Hack
Interesting story of a class break against the entire Tesla fleet...
2017 Tesla Hack
Interesting story of a class break against the entire Tesla fleet...
2017 Tesla Hack
Interesting story of a class break against the entire Tesla fleet...
Musk confirms Russian hacker tried hiring Tesla worker for malware attack
By Zara Khan The hacker wanted to carry out a DDoS attack on Tesla while stealing sensitive information with the help of malware. This is a post from HackRead.com Read the original post: Musk confirms Russian hacker tried hiring Tesla worker for malware attack...
Elon Musk Confirms, Tesla Factory A Target of Foiled Cyberattack
Tesla co-founder and CEO Elon Musk has confirmed reports that the Tesla Gigafactory Nevada was a target of a cyberattack earlier in August, which was subsequently thwarted by the Federal Bureau of Investigation. Tesla Gigafactory Nevada is a lithium-ion battery and electric vehicle factory near...
A Tesla Employee Thwarted an Alleged Ransomware Plot
Elon Musk confirmed Thursday night that a ransomware gang had approached a Gigafactory employee with alleged promises of a big payout...
A week in security (August 17 – 23)
Last week on Malwarebytes Labs, we looked at the impact of COVID-19 on healthcare cybersecurity, dug into some pandemic stats in terms of how workforces coped with going remote, and served up a crash course on malware detection. Our most recent Lock and Code podcast explored the safety of parenta...
New Agent Tesla variant steals passwords from web browsers & VPNs
By Waqas The new variant of Agent Tesla is equipped with many sophisticated features. This is a post from HackRead.com Read the original post: New Agent Tesla variant steals passwords from web browsers & VPNs...
Agent Tesla Spyware Adds Fresh Tricks to Its Arsenal
Since COVID-19 cast its pall in March, the Agent Tesla remote-access trojan RAT has exploited the pandemic and added a raft of functionality that has helped it dominate the enterprise threat scene. Though Agent Tesla first made a splash six years ago, it hasn’t lost any momentum – in fact, it is...
CVE-2020-15912
Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue...
Design/Logic Flaw
Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue...
CVE-2020-15912
Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue...
CVE-2020-15912
Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue...
CVE-2020-15912
CVE-2020-15912 affects Tesla Model 3 vehicles. The available documents describe a door-opening vulnerability where an attacker with access to a legitimate key card can relay NFC to unlock/open the door. The root cause is a vulnerability in NFC relay/authentication handling (as described across th...
PT-2020-14708 · Tesla · Tesla Model 3
Name of the Vulnerable Software and Affected Versions: Tesla Model 3 vehicles affected versions not specified Description: The issue allows attackers to open a door by leveraging access to a legitimate key card and then using NFC Relay. The vendor has developed Pin2Drive to mitigate this issue...
Identity in IoT
NOTE: This was originally posted on 19 Jun 2020 but I decided that a rewrite was in order, for clarity and better flow. Identity is important in the Internet of Things Device identity is one of the most important security challenges in IoT. If you get identity management wrong, you run a...