DiscoverSecurity SerengetiSS-NEWS-150 - T-Mobile Consent Decree and Kia Hacking
SS-NEWS-150 - T-Mobile Consent Decree and Kia Hacking

SS-NEWS-150 - T-Mobile Consent Decree and Kia Hacking

Update: 2024-10-07
Share

Description

Does the T-Mobile Consent Decree mean that the government is going to get more involved in breaches?  Additionally, Kia closes a gap in it's dealership API which allowed researchers to geolocate and lock/unlock cars.  Finally, we briefly discuss a new method attackers are monetizing AWS credentials... it's not pretty.


Article 1 -  T-Mobile US to cough up $31.5M after that long string of security SNAFUs
Supporting Articles:
The Cost of Doing Business
T-Mobile hit with $60M fine over data security violations
T-Mobile to take $400M hit from hacking settlement
T-Mobile Consent Decree


Article 2 - Hacking Kia: Remotely Controlling Cars With Just a License Plate
Supporting Articles:
Plate to VIN
Car Companies Know When You Speed. Then They Sell That Data


Article 3 - A Single Cloud Compromise Can Feed an Army of AI Sex Bots


If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

Comments 
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

SS-NEWS-150 - T-Mobile Consent Decree and Kia Hacking

SS-NEWS-150 - T-Mobile Consent Decree and Kia Hacking

David Schwendinger and Matthew Keener