waf bypass

Default admin:admin Password Let Researchers Start Cars

Default credentials on a ForgeRock admin console let researchers hijack accounts at two carmakers and start engines. The fix took two hours.