Researchers discovered that the login systems of two car brands’ mobile apps could be exploited due to a default ‘admin:admin’ server password, allowing them to access customer accounts and control connected cars. The vulnerability was fixed within hours of reporting. The researchers also identified a similar issue in the Australian systems of the same brands. https://thehackernews.com/2026/11/default-adminadmin-server-password.html