CyberSeeker@discuss.tchncs.detoTechnology@lemmy.world•Arizona toddler rescued after getting trapped in a Tesla with a dead battery | The Model Y’s 12-volt battery, which powers things like the doors and windows, diedEnglish
3·
5 months agoOnly the cyber truck. Model S and 3 refreshes are still on the legacy platform, with a lithium ion 12V.
Shouldn’t be this hard to find out the attack vector.
Buried deep, deep in their writeup:
RocketMQ servers
I’m sure if you’re running other insecure, public facing web servers with bad configs, the actor could exploit that too, but they didn’t provide any evidence of this happening in the wild (no threat group TTPs for initial access), so pure FUD to try to sell their security product.
Unfortunately, Ars mostly just restated verbatim what was provided by the security vendor Aqua Nautilus.