Subaru Security Flaws Exposed Its System for Tracking Millions of Cars

Independent researchers found multiple security flaws in Subaru's Starlink administrative portal that allowed account takeover of employee accounts (password resets bypassing client-side security checks) and exposed the ability for employees or third parties to view customers' historical location data; Subaru says the vulnerability was closed and no unauthorized access was observed.