Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

Researchers exploited default credentials in ForgeRock identity platform used by two automakers' mobile apps to gain account takeover, unlock vehicle doors, and start engines remotely.