2009 Bmw X5 Xdrive 35d Diesel Suv on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

Watch the BMW M4 GTS lap the Nurburgring in under 7:28

When BMW unveiled the new M4 GTS back in October, it said it could lap the Nurburgring in 7 minutes and 28 seconds. That's all well and fine in terms of bragging rights, but what Bimmer enthusiasts have been waiting for is the proof. And here it is, in ultra-HD 4k glory. In the video above, you can see the new M4 GTS scything its way through the Green Hell of the Eifel mountains. Behind the wheel is M GmbH engineer and racing driver Joerg Weidinger, who helpfully narrates the video to show us exactly how he tackled each and every corner along the 14-mile circuit. Which may come in handy for those with a season pass to the Nordschleife, but the rest of us are more concerned with that lap time and how it holds up. To put it plainly, the 7:27.88 lap makes the new GTS not only the fastest in the M3/M4 line to date, but the fastest production Bimmer ever clocked around the 'Ring. It handily beats the previous M3 CSL (7:50) and the stock M4 (7:52), and even trounces more powerful Bavarian machinery like the Z8, M5, and M6. There've been a handful of BMW-powered racers, motorcycles, and prototypes (not to mention the McLaren F1) that have clocked faster times, but as far as four-wheeled, standard production Munich-mobiles go, the new M4 GTS is the new King of the Ring. It also just so happens to match or beat the best times clocked by the more exotic likes of the Ferrari 458 Italia, McLaren MP4-12C, and Porsche Carrera GT – putting the M4 GTS in rare company indeed.

Mercedes-Maybach GLS 600 and our new long-term Acura TLX | Autoblog Podcast #661

In this week's Autoblog Podcast, Editor-in-Chief Greg Migliore is joined by Senior Editor, Green, John Beltz Snyder. This week, they talk about the cars they've been driving, including the Mercedes-Maybach GLS 600 and Audi A4, as well as the recently departed long-term Volvo S60 T8 and the new addition to the long-term fleet, an Acura TLX. In this week's news, they talk about the Stellantis merger completion, some more thoughts about GM at CES, BMW announcing an electric M car, an upcoming electric Lincoln Corsair and the possibility of an electric-only Ford Mustang in 2028. Autoblog Podcast #661 Get The Podcast iTunes – Subscribe to the Autoblog Podcast in iTunes RSS – Add the Autoblog Podcast feed to your RSS aggregator MP3 – Download the MP3 directly Rundown What we're driving:2021 Mercedes-Maybach GLS 600 2021 Audi A4 S Line 45 TFSI Quattro 2020 Volvo S60 T8 2021 Acura TLX A-Spec News:Stellantis is a thing now More thoughts on GM at CES BMW announces electric M car is coming this year Electric Lincoln Corsair-E coming in 2026, report says The next-gen Ford Mustang reportedly going all-electric, arriving in 2028 Feedback Email – Podcast@Autoblog.com Review the show on iTunes Related Video: