2001 Jeep Grand Cherokee Laredo 4wd on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Jeep gives Cherokee its yin and yang with Sageland and Urbane concepts

Among the design concepts Jeep has prepared for Beijing Motor Show this year are a pair of Cherokees dressed up in contrasting schemes.
In one corner we have the Sageland concept pictured above, drawing its inspiration from Shangri-La with an Ivory Peal tri-coat and bronze trim for the grille, fascia appliqués, roof rack, sunroof, mirror caps and exhaust tips. Inside it's all earth tones with light gray Nappa leather seats and red and blue top-stitching inspired by traditional Chinese themes.
Meanwhile the Urbane concept (pictured right) takes the Cherokee in a different direction with steel blue metallic paintjob and black accents. Inside it adopts the theme of Chinese calligraphy with Piano Black accepts and dark red Nappa leather.

Stellantis not looking for further mergers, including with Renault

MILAN — Stellantis Chairman John Elkann on Monday denied the carmaker was hatching merger plans, responding to press speculation about a possible French-led tie-up with rival Renault. Elkann said that the Peugeot owner, the world's third largest carmaker by sales, was focused on the execution of its long-term business plan. "There is no plan under consideration regarding merger operations with other manufacturers," said Elkann, who also heads Exor, the Agnelli family holding company that is the largest single shareholder in Stellantis. After abandoning the Russian market, at the time its second largest after France, and reducing the scope of its global cooperation with Nissan, Renault has been seen as a potential M&A target. Speculation intensified after an electric vehicle market slowdown forced it last week to cancel IPO plans for its EV and software unit Ampere. Its market cap remains stubbornly low at little over 10 billion euros ($10.8 billion) despite a financial recovery over the past few years. Stellantis, the product of a 2021 merger between France's PSA and Fiat Chrysler and one of the most profitable groups in the industry, has a market cap of more than 85 billion euros when unlisted shares are factored in. It has a 14 brand portfolio also including Citroen, Jeep, Opel and Alfa Romeo. NEWSPAPER REPORT Italian daily Il Messaggero had said on Sunday that the French government, which is Renault's largest shareholder and also has a stake in Stellantis, was studying plans for a merger between the two groups. A spokeswoman for Renault said on Monday the group did not comment on rumors. France's Finance Ministry had declined to comment on Sunday. Stellantis has crossed swords with the Italian government, which has accused it of acting against the national interest on occasions. Industry Minister Adolfo Urso last week raised the prospect of the Italian government taking a stake in Stellantis to help to balance the French influence. Renault shares pared gains after Elkann's comments to stand 1.2% higher by 1220 GMT, having initially risen more than 4%. Stellantis CEO Carlos Tavares, a Portuguese-national, last week said in an interview with Bloomberg that the group was "ready for any kind of consolidation" and that its job was to make sure that it would be "one of the winners". Analysts, however, question the rationale of a Stellantis-Renault merger, which would also expand the group's excess capacity in Europe.