Unlocking any car from X brand in most of the world

A security researcher discovered critical vulnerabilities in a major automaker's connected car platform after analyzing the mobile app and finding exposed admin tools on the internet. By decompiling the app and examining API requests, they identified that the system's infrastructure, including an admin tool subdomain, was accessible to anyone without proper security controls. The findings revealed that the automaker's telematics infrastructure had significant security flaws that could potentially allow unauthorized access to vehicle systems.