INSIDE THE TELEMATICS THREATS

Kaspersky uncovers critical flaws that could let attackers seize control of connected vehicles

- 

THE DISCOVERY

Kaspersky has uncovered a major vulnerability in the telematics infrastructure of a global automotive manufacturer, revealing how a single weak link in a contractor's system could expose every connected vehicle in the fleet to remote takeover. Presented at the Security Analyst Summit 2025, the findings draw attention to persistent cybersecurity gaps in modern, data-driven mobility.

By exploiting a zero-day flaw in a contractor's publicly accessible application, attackers could gain access to the automaker's telematics system and potentially manipulate critical vehicle functions. This includes forcing gear shifts or shutting off the engine while the vehicle is moving, posing a direct danger to drivers and passengers.

HOW THE BREACH HAPPENED