Unpatched Mazda Connect bugs let hackers install persistent malware
Just a moment...
Attackers could exploit several vulnerabilities in the Mazda Connect infotainment unit, present in multiple car models including Mazda 3 (2014-2021), to execute arbitrary code with root permission.
Looking over the threat, not an issue unless someone accesses your car unlocked(the car auto locks the doors after 15? minutes). I don't feel the threat of compromising the car is valid enough to elicit a genuine concern.
What this should inspire in the minds of readers is how dangerous technology is in a car and how technology that provides convenience compromises safety, that is not a compromise we should accept.
Like the article points out, a lot of people trust strangers with their vehicles (valets, mechanics, etc). It might not happen to me, but I could see an abusive spouse/SO or shady valet installing tracking/bugging software with this exploit.
There is no remote access to the system. So the person would need to have physical access to the USB port to retrieve any data.
Every car has a vulnerability that can allow someone to put a tracker on your car and it takes a couple seconds to execute with no advanced technical ability, sticking a GPS tracker with a 4g connection to the bottom of the chassis. Bugging a car is as easy as sticking a recording device under the seat.