KIA'S MASSIVE SECURITY BREACH - WHAT YOU NEED TO KNOW

EV Channels Review

This video thoroughly investigates a significant security vulnerability discovered in Kia's telematics system, which allowed unauthorized access and control of a majority of Kia models from the last decade using only a license plate number. The presenter, Nikki Gordon-Bloomfield, highlights that while the exploit could enable remote actions like locking/unlocking doors, remote start, and activating horns/lights, it mercifully did not allow for the vehicle to be physically driven away. A key concern raised is the potential for attackers to access personal owner information, enabling further social engineering attacks. The video commends white-hat security expert Sam Curry for his ethical disclosure process, but criticizes Kia's slow response, noting a two-month period between disclosure and remediation. While the vulnerability is now patched, the video advises owners to maintain strong cybersecurity practices, such as unique passwords and considering credit cards with transaction limits for associated accounts. It also touches upon more extreme measures like removing telematics systems, though cautions against this due to potential functionality loss and reduced desirability. Ultimately, the review suggests that while telematics offer convenience, automakers must prioritize robust digital security, and legislative action may be necessary to enforce this.