The initial attempt was clever but not clever enough. However, the disassembly of the Python code was telling. The second attempt, however, was particularly interesting. That attempt used an odd ...

If the vehicle sees the same code again it rejects the command ... The YS1 uses RfCat firmware, which is an interactive python shell that acts as the controller for the wireless transceiver.

Researchers say compromised tool in the GitHub CI/CD environment stole credentials; infosec leaders need to act immediately.