2014 Jeep Wrangler Unlimited Sport on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Stellantis not looking for further mergers, including with Renault

MILAN — Stellantis Chairman John Elkann on Monday denied the carmaker was hatching merger plans, responding to press speculation about a possible French-led tie-up with rival Renault. Elkann said that the Peugeot owner, the world's third largest carmaker by sales, was focused on the execution of its long-term business plan. "There is no plan under consideration regarding merger operations with other manufacturers," said Elkann, who also heads Exor, the Agnelli family holding company that is the largest single shareholder in Stellantis. After abandoning the Russian market, at the time its second largest after France, and reducing the scope of its global cooperation with Nissan, Renault has been seen as a potential M&A target. Speculation intensified after an electric vehicle market slowdown forced it last week to cancel IPO plans for its EV and software unit Ampere. Its market cap remains stubbornly low at little over 10 billion euros ($10.8 billion) despite a financial recovery over the past few years. Stellantis, the product of a 2021 merger between France's PSA and Fiat Chrysler and one of the most profitable groups in the industry, has a market cap of more than 85 billion euros when unlisted shares are factored in. It has a 14 brand portfolio also including Citroen, Jeep, Opel and Alfa Romeo. NEWSPAPER REPORT Italian daily Il Messaggero had said on Sunday that the French government, which is Renault's largest shareholder and also has a stake in Stellantis, was studying plans for a merger between the two groups. A spokeswoman for Renault said on Monday the group did not comment on rumors. France's Finance Ministry had declined to comment on Sunday. Stellantis has crossed swords with the Italian government, which has accused it of acting against the national interest on occasions. Industry Minister Adolfo Urso last week raised the prospect of the Italian government taking a stake in Stellantis to help to balance the French influence. Renault shares pared gains after Elkann's comments to stand 1.2% higher by 1220 GMT, having initially risen more than 4%. Stellantis CEO Carlos Tavares, a Portuguese-national, last week said in an interview with Bloomberg that the group was "ready for any kind of consolidation" and that its job was to make sure that it would be "one of the winners". Analysts, however, question the rationale of a Stellantis-Renault merger, which would also expand the group's excess capacity in Europe.

Jeep still working to improve Cherokee's 9-speed auto

Fiat Chrysler is hoping an upcoming software update will stem the tide of consumer complaints surrounding its nine-speed automatic transmission. Owners of the 2014 Jeep Cherokee have reported a number of problems on the National Highway Traffic Safety Administration's SaferCar.gov website, since the new model and its troubled gearbox arrived way back in October 2013. The software update is "intended to keep the vehicle performing as intended, and to prevent durability issues from occurring in the future," an FCA spokesperson told Automotive News, and will be available to owners of both the 2014 to 2015 Jeep Cherokee and the 2015 Chrysler 200, which also uses the 9AT. While FCA will be notifying consumers of the update, owners can also request the software reflash if they happen into their dealer before then. Despite the widely documented problems with the transmission, the only complaints on NHTSA's website relate to the 2014 Cherokee – neither the 2015 Jeep nor the 200 have received any complaints. That bodes well as FCA prepares to begin deliveries of the 2015 Jeep Renegade and launch the Fiat 500X, both of which pair the 9AT with the 2.4-liter Tigershark four-cylinder. "We have had to do an inordinate amount of intervention on that transmission, surely beyond what any of us had forecast," FCA CEO Sergio Marchionne told Automotive News. "There are things that we have done – that we continue to do. Our proactive customer care intervention has actually increased in intensity on these vehicles in 2014, especially in the second half." What's fascinating about the 9AT's problems are that they haven't been the fault of manufacturer ZF, but have related to software that wasn't "mature" and had "teething problems," Marchionne has said previously, AN reports. With the lack of criticism for the 9AT in 2015 models and this pending software update, though, here's hoping that FCA has finally figured out its fuel-sipping gearbox. Related Video: