The move comes after a Jeep Cherokee was hacked Fiat Chrysler Automobiles has launched a bug bounty program to attract white-hat hackers to spot out cybersecurity flaws in its products and connected services. The program is focused on FCA’s connected vehicles, including systems within them and external services and applications that link to them. The move follows the remote hack and control of a Jeep Cherokee, one of the company’s products, by security researchers. That breach led to the recall of 1.4 million vehicles last year. Fiat Chrysler is also moving quite aggressively in the area of autonomous vehicles, announcing earlier this year the joint development of self-driven minivans with Alphabet’s Google Self-Driving Car Project. The bug bounty program offers between US$150 to $1,500 for a bug, which is small compared to the bounties companies like Google and Facebook offer, but reflects the concern of car companies to secure their cars from hacks as they plan to package more automation and connectivity into the vehicles. The automaker’s FCA US unit has teamed up with Bugcrowd, which offers crowdsourced application security testing, and will also manage the reward payouts depending on the criticality of the product security vulnerability. Bugcrowd claims about 28,000 security researchers on its platform. “We want to encourage independent security researchers to reach out to us and share what they’ve found so that we can fix potential vulnerabilities before they’re an issue for our consumers,” said Titus Melnyk, senior manager for security architecture at FCA US. Under the program, no legal action will be taken nor will law enforcement be asked to investigate researchers participating in the program provided they comply with certain guidelines. These guidelines include providing full details of the vulnerability, including information needed to reproduce and validate the issue by producing a proof of concept. Researchers also have to “make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our services,” and not modify, access, or retain data that does not belong to them. More details can be found here. Tesla Motors also introduced a bug bounty program on Bugcrowd, and is currently offering between $25 and $10,000 a bug. Related content news Cisco marries AI and security with cloud-based data center offering Cisco announces AI-based Hypershield, a self-upgrading security fabric that's designed to protect distributed applications, devices and data. By Michael Cooney Apr 18, 2024 5 mins Network Security Data Center how-to Shredding files on Linux with the shred command The shred command is a good option for removing files from a Linux system in a way that makes them virtually impossible to recover. By Sandra Henry-Stocker Apr 18, 2024 4 mins Linux news Intel announces edge AI processors New edge-optimized processors and FPGAs will power AI-enabled devices in vertical industries including retail, industrial and healthcare. By Andy Patrizio Apr 18, 2024 3 mins CPUs and Processors Edge Computing news HPE sues China’s Inspur Group for server patent infringement HPE has accused Inspur of infringing on more than 10,000 active patents, specifically those related to its server technologies, such as general-purpose servers, rack servers, high-density servers, and AI servers. By Sandeep Budki Apr 18, 2024 3 mins Technology Industry Servers PODCASTS VIDEOS RESOURCES EVENTS NEWSLETTERS Newsletter Promo Module Test Description for newsletter promo module. Please enter a valid email address Subscribe