# Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns

Source: [www.theregister.com - Articles](https://www.theregister.com/security/2026/11/09/researchers-pwn-automakers-android-apps-to-remotely-unlock-cars-honk-horns/5308483) · 2026-11-09 · Industry
Page: https://themorning.dev/story/researchers-pwn-automakers-android-apps-to-remotely-unlock-cars-honk-horns-ea9844bbee9e3400
Kind: security · Impact: high

## In brief

- Security researchers exploited flaws in automakers' Android apps to gain remote access to connected cars from two major automakers.
- The researchers were able to start engines, flash headlights and sound horns remotely.
- Shubham Shah of Assetnote and researcher Sam Curry worked together on the research.

## Why it matters

Remote vehicle features exposed through mobile apps can be abused if their backend and app authentication are weak, so developers of connected-car or similar IoT apps should review how remote commands are authorised.

## Coverage

- [Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns](https://www.theregister.com/security/2026/11/09/researchers-pwn-automakers-android-apps-to-remotely-unlock-cars-honk-horns/5308483) — www.theregister.com - Articles, 2026-11-09

Tags: security, automotive, android, iot, vulnerability

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev