The latest update for Hyundai’s Blue Link mobile vehicle management app fixes a couple of vulnerabilities that could have let a remote attacker track, unlock and start a car paired with the software. Researchers discovered that Blue Link sent the information collected from the car to a never-changing IP address over the insecure HTTP protocol. This data was encrypted before passing it on, but the app stored the decoding key, which could not be changed. Researchers allowed more than a month to pass before disclosing the issues so the update could reach many, if not all, users.”]
Source: https://www.bitdefender.com/blog/hotforsecurity/hyundai-patches-app-info-exposure-user-car/