Toyota was able to correct the security flaw of its system after a white hat hacker alerted them
by Brad Anderson
10 hours ago
by Brad Anderson
Toyota has closed a security vulnerability exposed by a white hat hacker who gained access to some 14,000 corporate email accounts and other confidential information.
A 29-year-old by the name of Eaton Zveare was able to gain access to the web portal used by Toyota’s employees and suppliers by using a JSON Web Token, or JWT. To do so, the hacker searched for Toyota supply chain employees in the web portal and entered the name of an employee using the format firstname.lastname@toyota.com.
Zveare was then able to search the portal for an account with system administrator privileges and repeated the process to gain access to thousands of email accounts as well as project documents, supplier rankings, comments, and other information, Auto News reports. Toyota was alerted to the vulnerability last November.
“Toyota takes cyber threats very seriously,” Toyota Connected North America’s senior communication manager Corey Proffitt said in a statement. “We regularly test our systems and also run a coordinated disclosure program to allow security researchers to report vulnerabilities. We appreciate the research performed by Eaton. We promptly remediated the reported vulnerability and confirmed that there was no evidence of malicious access to Toyota systems.”
The hacker had hoped that Toyota would reward him for his security research but he was not paid for his efforts.
“Given how much profit they make per year, I think they should definitely allocate some to their security teams that they can use to reward researchers,” Zveare said. “While recognition is always appreciated, if you don’t offer money, it might be more appealing for hackers to sell their exploits on the black market.”
advertisement scroll to continue
ivermectin 3mg without prescription – tegretol 400mg oral tegretol where to buy
isotretinoin for sale – order accutane 20mg without prescription linezolid oral
buy amoxil sale – buy valsartan 160mg pills order ipratropium
buy generic omnacortil 40mg – order azipro pills oral progesterone 200mg
buy neurontin no prescription – order neurontin online cheap sporanox brand
clavulanate brand – where to buy duloxetine without a prescription buy cymbalta generic
where to buy semaglutide without a prescription – cyproheptadine buy online buy cyproheptadine 4mg generic
cialis tablets – tadalafil without prescription sildenafil 100mg uk
order cenforce for sale – cenforce 50mg uk buy glycomet 1000mg online cheap
where to buy prilosec without a prescription – metoprolol 100mg ca atenolol pills
buy desloratadine cheap – brand claritin 10mg brand priligy 30mg
buy generic misoprostol online – order misoprostol 200mcg where can i buy diltiazem
purchase domperidone generic – domperidone online order buy cyclobenzaprine 15mg pill
inderal ca – propranolol pills purchase methotrexate online cheap
coumadin 5mg brand – reglan 10mg pills buy cheap hyzaar
order generic levofloxacin 250mg – avodart cost order zantac 150mg pills
order mobic 7.5mg pills – buy meloxicam 7.5mg without prescription buy generic tamsulosin 0.2mg
zofran medication – purchase zofran generic zocor 10mg over the counter
buy valtrex online cheap – valacyclovir 1000mg for sale where to buy forcan without a prescription