Black Hat Europe 2024: Hacking a car – or rather, its infotainment system

This article reviews Black Hat Europe 2024 research demonstrating that attackers could exploit vulnerabilities in modern vehicle infotainment systems—via a maliciously modified contact list—to achieve remote code execution, control microphones, exfiltrate contacts and location data, and track vehicles; 21 vulnerabilities affecting about 1.4 million vehicles were disclosed and have since been patched, and the piece emphasizes privacy risks over direct vehicle-control threats.