Researchers discovered that the login systems of two car brands’ mobile apps could be exploited due to a default ‘admin:admin’ server password, allowing them to access customer accounts and control connected cars. The vulnerability was fixed within hours of reporting. The researchers also identified a similar issue in the Australian systems of the same brands. thehackernews.com/…/default-adminadmin-server-pas…