As more cars start to gain Internet connectivity, we need to have a serious discussion about automotive cybersecurity.

Earlier this Tuesday, researchers revealed an exploit that allowed them to disable the engine and braking in a Jeep Cherokee – all using a laptop and smartphone from the comfort of their living room. The hack also gave them control over steering while the car was in reverse, as well as the windshield wiper and washer functions. They could operate the climate control and radio too, though that’s more irritating than it is dangerous.
No physical access was required. The researchers only needed the IP address associated with the infotainment system. They knew this info beforehand, but hackers could pinpoint the IP of a specific target if they had several phones searching together. In theory, any Fiat Chrysler vehicle equipped with the Uconnect system is vulnerable. The good news is that a fix has been published, which owners can download here. The bad news" The automaker didn’t see fit to issue a recall. It’s up to owners to get the update installed, either on their own or by request at their dealership.
Such inaction is reflective of a lax attitude towards cybersecurity in the auto industry, as seen in a United States Senate report published last year. 16 automakers responded to questions posed by Senator Ed Markey about their cybersecurity measures: BMW, Chrysler, Ford, General Motors, Honda, Hyundai, Jaguar La...