Millions of Kia Vehicles Open to Remote Hacks via License Plate

Independent researchers discovered an API authentication flaw in Kia vehicles that let attackers register dealer accounts, obtain dealer API tokens, and, using just a vehicle's license-plate, execute remote commands (ignition, locks, lights, horn), obtain precise geolocation and owner PII across model years 2013–2025; a proof-of-concept demonstrated rapid exploitation and the issue was reportedly fixed in mid‑August following disclosure.