5 August 2015
The Insurance Council of Australia recently reminded businesses that rising cybercrime attacks threaten to affect their operations, calling for proactive steps to increase protection and manage risk.
While the organisation referred to data from the Australian Cyber Security Centre (ACSC), noting that attacks in the country have nearly quadrupled since 2011 (growing from 313 to 1131), recent incidents in the United States have uncovered a less common form of cybercrime: Car hacking.
As vehicles become increasingly sophisticated, is there another source of vulnerability that thieves and criminals could exploit? Whether your commercial fleet or company vehicles utilise high-tech features, it's worth considering whether your assets could be at risk and how you can protect your business cars.
How are people hacking cars?
Instead of car jacking, the vehicular crime of the future may be more remote and high-tech: car hacking.
Recently, automobile manufacturer Chrysler recalled 1.4 million vehicles after discovering a software vulnerability in the cars' software, The Verge reported. While unaware of any complaints or injuries associated with the issue, the company decided to take action to prevent any exploitations. Closer to home, a Queensland University of Technology road safety expert expressed similar concerns in 2014, comparing the security system in cars to that of 1980 desktop computers.
Chrysler announces 1.4 million vehicle recall following reports of security #vulnerabilities in car software. http://t.co/GgfmFVeO4x
??€” Security Response (@threatintel) July 27, 2015
Wired.com had two computer experts attempt to hijack a Jeep's system while it was driving down a highway. The hackers (who have been sharing their ongoing work with the manufacturer for nine months) succeeded, managing to take over the internet-enabled UConnect system. Like similar systems in other makes, the feature facilitates phone calls, entertainment and navigation controls and more.
The hackers were able to tap into the system, taking control of the air conditioning, windshield wipers and radio - before cutting the transmission.
What does it mean for you?
Naturally, such possibilities are highly concerning, and these latest revelations are hardly the only manifestation of vehicle-related cybercrime. Although the specific technology targeted in the Wired investigation is not yet available in Australia, the government is taking measures to secure an internet network for the road system, ABC reported. While lawmakers and automobile manufacturers will have to grapple with the need to increase digital security for these machines, organisations should take stock of their own fleet and be aware of both digital and more traditional risks.
Australian businesses lose $1 billion a year to cybercrime attacks
Of course, digital security doesn't stop with vehicles. Cybercrime can be detrimental to businesses in diverse ways, from data theft to viruses or other measures that interrupt operations or destroy equipment. The ACSC estimated Australian businesses lose $1 billion a year to cybercrime attacks. In general, enterprises should take measures to bolster their security and reduce risk to their assets, such as by obtaining appropriate business insurance. However, this car development is a strong reminder that cybersecurity extends far beyond servers and desktops.
With the Internet of Things connecting more devices through the web, organisations taking advantage of innovative technology have all the more reason to carry out a stringent risk management program, including speaking with a business insurance advisor to learn the best options for cover.