U.S. Urge Automakers to Prioritize Cyber Security

U.S. regulators said on Monday that automakers should make protecting the electronic and computer systems of vehicles from cyber criminals a priority. They said that car manufacturers should develop levels of protection that can safeguard a vehicle throughout its life.

The cyber security guidelines released by the U.S. National Highway Traffic Safety Administration are suggestions, not enforceable rules. But they indicate a step toward creating a blueprint for industry performance. This is due to pressure from lawmakers and consumers on car manufacturers to show how they will protect increasingly connected and automated vehicles from cyber attacks.

A number of the agency’s recommendations reiterate efforts major manufacturers are doing already. This includes forming a group to share information about cyber security threats. These proposals are comprised in a document labeled “Cybersecurity Best Practices for Modern Vehicles”.

Jonathan Allen, acting executive director of the Automotive Information Sharing and Analysis Center (AUTO-ISAC), said in an interview on Monday that automakers will thoroughly go over the technical aspects of the agency’s proposals. Further, they will assess proposals associated to the disclosure of information about “the secret sauce” of data and electrical systems, which is highly competitive. The group was created by automakers as a clearinghouse for firms to impart data about cyber security threats and countermeasures.

Data security researchers released an exploit of successfully seizing remote control of a Jeep Cherokee. Hence, car manufacturers stepped up efforts to deal with hacking threats over the past year. In fact, Fiat Chrysler Automobiles recalled 1.4 million vehicles in July 2015. The company installed software on these cars to safeguard against future data breaches.

Moreover, Tesla Motors Inc and BMW AG, have revealed programs to handle potential data security gaps.

Upgrades via datalink vulnerable to cyber threats

More auto manufacturers prepare to pursue Tesla’s lead and start offering significant vehicle upgrades via wireless data links. However, this makes the protection of data and communications systems in vehicles becomes more crucial. Earlier this year, the Federal Bureau of Investigation cautioned that criminals could take advantage of online vehicle software updates.

The NHTSA urge vehicle manufacturers to perform tests of vehicle systems to find out if the cyber security systems can be violated. Moreover, they recommend that automakers should document their testing and their evaluation of the risks.

U.S. Senators Richard Blumenthal of Connecticut and Ed Markey of Massachusetts said the NHTSA should do more. “If modern day cars are computers on wheels, we need mandatory standards, not voluntary guidance, to ensure that our vehicles cannot be hacked and lives and information put in danger,” the lawmakers said in a statement Monday.

 

 

The post U.S. Urge Automakers to Prioritize Cyber Security appeared first on Newsline.

Symantec Warns: Another Hacker Group Targets SWIFT Users

A second hacking group has pursued to rob banks using deceptive SWIFT messages, Cyber-security firm Symantec Corp said on Tuesday. This is a similar approach that granted $81 million in the notorious February attack on Bangladesh’s central bank.

SWIFT is the messaging system that is the hub of the global financial system. Symantec said that a group named Odinaff has infected ten to twenty organizations with malware. These can be utilized to conceal deceitful transfer requests made over the messaging system.

Symantec’s investigation offered fresh insight into ongoing hacking earlier revealed by SWIFT. Gottfried Leibbrandt, SWIFT’s Chief Executive, notified customers last month about three hacks and cautioned that cyber attacks on banks are primed to increase.

Symantec and SWIFT have not named particular victims of Odinaff other than Bangladesh Bank. Most attacks, however, happened in the United Kingdom, Australia, Ukraine, Hong Kong, and the United States, Symantec said.

In May, the company said it believed a group known as Lazarus executed the Bangladesh theft. The group was also accountable for attacks on SWIFT customers in Southeast Asia and the hacking of Sony Pictures Entertainment in 2014.

Lazarus sanctioned by nation state

The United States has accused North Korea for the Sony attack, though Symantec has not confirmed the Koreans were behind Lazarus. Nevertheless, the high level of sophistication of its work indicates connection by a nation state.

On the other hand, Odinaff seems to be a financially motivated criminal group and not a nation state, the company added.

Symantec said it believed that Odinaff is connected to the hacking group Carbanak. The group has been known to target merchant point-of-sale systems and banks since 2014.

The post Symantec Warns: Another Hacker Group Targets SWIFT Users appeared first on Newsline.