> TritonInfoSec News
Home / Nov 10, 2026 / Story
0
#8 The Hacker News general November 09, 2026 at 11:27 UTC

Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

By [email protected] (The Hacker News)

AI Summary

Security researchers found that two automakers' mobile app backends, both using ForgeRock (now Ping Identity) as the identity platform, were configured with the default 'admin:admin' password, allowing full account takeover and enabling remote door unlock and engine start for connected vehicles. The flaw demonstrates that default credential hygiene failures persist even in safety-critical automotive systems. Both manufacturers have been notified, though the article does not name them.

Read full article → https://thehackernews.com/2026/11/default-adminadm…

Relevance score: 79.0/100

# More from November 10

  1. 1
    Hackers exploit SSHole OpenSSH flaw to breach Linux systems BleepingComputer
  2. 2
    N-able takes cloud platform offline after 30+ "zero-days" published BleepingComputer
  3. 3
    France blames Iranian hackers for supermarket attacks that sparked fires BleepingComputer
  4. 4
    CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation The Hacker News
  5. 5
    Plex2Shell Exploited Against QNAP NAS Users SecurityWeek
  6. 6
    Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data The Hacker News
  7. 7
    Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware The Hacker News
  8. 9
    FBI agent stole $2.5 million in crypto from hackers under investigation BleepingComputer
  9. 10
    Vanderbilt University hit in BYOD ransomware attack, data theft claimed BleepingComputer