All it might take is a USB stick and 10 seconds for a Mazda to be turned into a kind of spy mobile. Though they didn't name the manufacturer directly, Forbes was able to determine the name of the car maker affected as Mazda. A Mazda spokesperson said the company hadn't been contacted by the researchers and couldn't respond to the findings without more information. Via onboard USB and Wi-Fi, Cirlig and Tanase probed an unspecified vehicle and abused the autorun feature on the car's Linux OS. It may be difficult for Mazda to roll out fixes without an over-the-air update too.
Source: Forbes March 09, 2018 18:22 UTC