On November 20, 2024, Shubham Shah and Sam Curry discovered a critical security vulnerability in Subaru’s STARLINK connected ... to all vehicles and customer accounts in the United States ...
Curry and Shah then used LinkedIn to locate the email address of a Subaru Starlink developer, exploiting the vulnerabilities to take over this employee's account, which granted them access to ...
in certain Subaru models is a scary reminder ... next phase of the attack and use the access to Starlink servers to create new administrator accounts to a connected vehicle. Doing this granted ...