Researchers: Chinese-made GPS tracker highly vulnerable

BOSTON (AP) — Cybersecurity researchers say a popular Chinese-made automotive GPS tracker used in 169 countries has severe software vulnerabilities. Because it is used by law enforcement, militaries and Fortune 50 companies it could potentially pose a danger to life and limb, national security and supply chains. A report by the Boston cybersecurity firm BitSight says attackers could remotely hijack device-equipped vehicles by cutting off fuel and otherwise wresting control of them. It recommends users immediately disable the MV720 GPS tracker until a fix becomes available. The U.S. Cybersecurity Infrastructure Security Agency planned to issue an advisory Tuesday (July 19, 2022) about the tracker after unsuccessful attempts to get the manufacturer to produce a fix.