Weak security means attackers could disable all of a city's public EV chargers

A Black Hat Asia presentation demonstrated that rentable IoT infrastructure (notably public EV chargers and shared micromobility) often sacrifices security for convenience: devices expose debug ports and shared keys, back-end services lack proper authentication, and mobile apps can be abused to create indistinguishable phantom clients. The researcher created an exploitation tool (IDScope) and showed a live demo disabling individual EV chargers via the vendor app, asserting the same flaws could enable large-scale denial-of-service across city charging networks and are likely present beyond China.