Car Tyre Sensors Can Be Used to Track Drivers Without Their Knowledge

New research from IMDEA Networks reveals how unencrypted signals from tyre pressure sensors in brands like Toyota and Mercedes can be used for covert vehicle tracking. Learn how these low-cost systems can map out your daily routines and why current regulations fail to protect driver privacy...

CVE-2023-29389

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated"...

Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’

A prolific cybercriminal group that calls itself "Scattered LAPSUS$ Hunters " has dominated headlines this year by regularly stealing data from and publicly mass extorting dozens of major corporations. But the tables seem to have turned somewhat for "Rey," the moniker chosen by the technical...

EUVD-2025-147683

Malicious code in toyota-cir1 npm...

EUVD-2025-147682

Malicious code in toyota-cir10 npm...

EUVD-2025-147673

Malicious code in toyota-cir4 npm...

EUVD-2025-147672

Malicious code in toyota-cir5 npm...

EUVD-2025-147679

Malicious code in toyota-cir13 npm...

Malicious code in toyota-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d572b2215b2a318951c7ae73ba218e4bd1cfc406e7be9e1bce1e6ab268f048d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb50aaf2920ed65a812c92dcc054b5fc5ee8ac69de31be2b312440f17faa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01082e453c46046c8493227ad697fb7471e28f964c5a73abee3f31b0501f463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62ae286d7808fd8d4ad807c7cf84f461602df9b462dcde599bf8ac912ea113e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147674

Malicious code in toyota-cir3 npm...

EUVD-2025-147678

Malicious code in toyota-cir14 npm...

Malicious code in toyota-cir8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc9b2956a248b9ed5da845bb6a9c1d46dc16b5491d2e0ea8de112e1ae4cd2f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147681

Malicious code in toyota-cir11 npm...

Malicious code in toyota-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c0448788eb49971e593cc0cb571261c61da0a58cdeec7d84398cd37f84a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147675

Malicious code in toyota-cir2 npm...

EUVD-2025-147669

Malicious code in toyota-cir8 npm...

EUVD-2025-147680

Malicious code in toyota-cir12 npm...