Certified 0.90% Apr Avail Navigation Heated Seats Awd Cold Weather Pkg Prem Pkg on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

BMW X6 M said to lap the 'Ring in 8:20

Bimmer Today reports that the German rag Auto Zeitung ran an Audi RS3 and a BMW X6 M around the Nurburgring together, and the hotted-up sports activity vehicle came in just five seconds behind the white-hot hatch. Driven by 'Ring regular Horst von Saurma, the RS3 ran its lap in 8 minutes, 15 seconds, and the X6 M ran an 8:20. If those times are accurate, that makes the X6 M the second fastest production SUV on the lap-time list according to Wikipedia: ahead of it is the 550-hp Range Rover Sport SVR, which ran a time of 8:14. That time puts BMW's 575-horsepower, 5,200-pound SUV four seconds ahead of the time registered by the last-gen, 555-hp X6 M, and well ahead of the Porsche Cayenne Turbo S that Sport Auto clocked an 8:34 with. It would not, however, match the predictions that X6 M project manager Herbert Bayerl made for it in an interview with Sport Auto earlier this year. Bayerl said "The new BMW X6 M moves at the level of M3," speaking of the E92 BMW M3 that Sport Auto ran around the 'Ring in 8:05. It is, though, two seconds faster than the E46 M3, which lapped in 8:22. Bayerl called out the Range Rover Sport SVR directly, saying, "We have been traveling much faster in testing and have undercut the time of Range Rover several times," and "We don't need any special attachments to go faster." Auto Zeitung's report on the lap is only for subscribers so we'll have to wait for more official news. For the apples-to-apples comparison we'll be looking forward to Sport Auto's hot lap, then we'll know if the Range Rover has anything to fear. Related Video:

BMW 1 Series GT morphs into production-spec 225i Active Tourer

Based on the effort - and money - BMW is spending to break off the coupes and convertibles in its lineup as even-numbered models (like the new 2 Series and 4 Series), we figured the production version of the 2012 Concept Active Tourer was a lock to wear the 1 Series GT name. These spy shots paint a different picture, however, as they show the car seemingly in full showroom-ready trim during a photo shoot, wearing the 225i name indicating that it will be in the 2 Series family.
While it's still very possible that this badging is the final bit of trickery for disguising the front-wheel-drive 1 Series GT, the hatchback itself appears to be the real deal. Aside from new fascias, a smaller grille and slightly different lights, the styling of this "225i" stayed pretty true to the Concept Active Tourer. Thanks to our long-lensed photographer, we also get a brief glimpse inside the hatchback, which reveals a two-tiered instrument panel layout including the free-standing navigation display that is similar to the concept car.
Regardless of what name this new model will wear, expect it to be unveiled at next year's Geneva Motor Show in March before arriving in the US sometime in 2015.