Security vulnerability in two car brands: Remote access was achieved, engines were started

Cybersecurity researchers gained unauthorized remote access to vehicles from two different automakers, unlocking the doors and starting the engines. The flaw stemmed from mobile app servers left protected by default "admin" credentials for both username and password. The incident highlights growing security risks in connected-car software, where weak server configurations can expose physical vehicle controls. It remains unclear how many vehicles or which specific brands were affected. Watch for the automakers to rotate credentials, audit their backend systems, and disclose the scope of the exposure.