New PerfektBlue Attack Exposes Millions of Cars to Remote Hacking

**Executive Summary:** PerfektBlue is a critical chained-exploit against OpenSynergy's BlueSDK Bluetooth framework that leverages four CVE'd flaws (including a CVSS 8.0 Use-After-Free in AVRCP) to achieve one-click remote code execution on IVI systems; proof-of-concept exploits have been demonstrated on Mercedes‑Benz NTG6/NTG7, Volkswagen MEB ICAS3, and Škoda MIB3 units, exposing millions of vehicles to GPS tracking, audio surveillance, data exfiltration, and potential lateral movement to vehicle ECUs while industry patch delays widened the window of exposure.