Controlling vehicle features of Nissan LEAFs across the globe via vulnerable APIs

Blog post about exploiting smartphone remote control in a Nissan Leaf.  The API used no authentication, allowing someone to manipulate the car remotely using the VIN alone.

https://www.troyhunt.com/controlling-vehicle-features-of-nissan/