Hidden Device Poses Serious Hacking Risk to U.S. Vehicles

WHO:

The Drive - Karr is a company that sells alarm systems and is a leader in this space, with its tech installed in approximately 2 million vehicles across the U.S.

Drudge Report - Millions of vehicles are affected by the hidden device installed by dealerships.

Wired - Researchers are warning about the vulnerabilities of these devices.

WHAT:

The Drive - Karr has stated that it took 18 months to issue the firmware update to patch the vulnerability.

The Drive - A UCSD professor described the vulnerability as “probably the worst” car hacking threat to date.

The Drive - Researchers from UC San Diego discovered a vulnerability in Karr’s system that could allow hackers to send commands over Bluetooth to unlock car doors and disable ignition.

The Drive - Karr has issued a firmware update to patch the vulnerability, which can be installed via a companion smartphone app.

Drudge Report - A hidden device in cars poses a serious risk of hacking and paralysis.

Wired - The devices can be hacked to unlock, track, and disable cars.

WHERE:

Wired - The issue affects vehicles across the United States.

WHY:

Wired - Dealerships installed alarms in millions of vehicles, even if the buyer did not want them, leading to vulnerabilities.

HOW:

The Drive - Karr's systems are used by over 3,000 dealers nationwide for loss prevention measures, allowing dealers to track their inventory before sale.

The Drive - Karr-alarmed vehicles have Bluetooth radios that remain active for 10 minutes after the car is turned off, increasing the risk of exploitation.

Wired - The hidden devices can be exploited by hackers to gain unauthorized access to the vehicles.

(UPDATED July 21, 2026 23:17 UTC)

A UCSD professor has labeled a recent car hacking vulnerability as “probably the worst” threat to date, highlighting serious concerns within the automotive industry. It took 18 months for Karr to issue a firmware update to address this issue, which affects systems used by over 3,000 dealers nationwide for loss prevention and inventory tracking. The implications of this vulnerability underscore the importance of cybersecurity in modern vehicles.

--

(UPDATED July 21, 2026 22:20 UTC)

Karr, a leading company in alarm systems with technology installed in around 2 million vehicles across the U.S., is facing scrutiny after researchers from UC San Diego uncovered a vulnerability in their system. This flaw could potentially allow hackers to send Bluetooth commands that unlock car doors and disable ignition, but Karr has responded by issuing a firmware update that can be installed through a companion smartphone app. The issue arises from Karr-alarmed vehicles having Bluetooth radios that stay active for 10 minutes after the car is turned off, which heightens the risk of exploitation.

--

(UPDATED July 21, 2026 15:33 UTC)

Millions of vehicles across the United States are at risk due to a hidden device installed by dealerships, which poses serious vulnerabilities that could lead to hacking and even paralysis of the cars. Researchers warn that these devices can be exploited by hackers to unlock, track, and disable vehicles, raising significant safety concerns. This alarming situation stems from dealerships installing these alarms in countless cars, often without the buyer's consent, creating a pathway for unauthorized access.