FTC Warning Underscores Need for Endpoint Management

Connected cars have been in the news in the past because of their vulnerabilities. When security researchers were able to remotely disable the transmission of a 2014 Jeep Cherokee while it was still driving on the highway, it was proven that hackers have the potential to take control of connected cars. Back in March, the Department of Transportation and the National Highway Traffic, the Safety Administration, and the FBI issued a public announcement warning drivers about cyberattacks on connected vehicles.

Now one of the latest threats to endpoint management security could be connected rental cars. The Federal Trade Commission published a blog post warning about the capabilities of connected cars, especially when they’re rental cars.

Below are three ways drivers and passengers can protect their data from being stored on infotainment systems:

• When drivers connect their smartphones into a rental car’s USB port for charging, the car may automatically share contact information and text messages, even if the driver doesn’t want to use their phone with the car’s infotainment system. Drivers can use cigarette lighter adapters to charge their personal devices instead of using the car’s USB ports. Unfortunately, some cars don’t have a lighter port. People can carry a portable charger and a USB cord for their devices if they want to avoid sharing personal information with their rental cars.

• Users should also check permission settings to prevent their personal data from being automatically shared with the rental car. For example, users can allow connected cars to only have access to their phone’s music or navigation app, but not to their contact data.

• Users can also try to delete any data they’ve shared before returning the car. The car’s infotainment system’s settings menu should include a list of devices that have been connected to the system. Drivers should find all of their devices in the car’s system and follow prompts to delete them. Drivers can consult the car’s owner’s manual for more guidance.

If drivers fail to delete their personal information from these connected cars, the next driver might be able to access that information. This is problematic for companies that work with confidential data. If an employee on a business trip connects their work phone to a rental car, the rental car may store that information and give nonemployees access.