News
Details Behind the Tesla Model S Hack
Two researchers broke into the software of a Tesla recently. But there is good news behind the Tesla Model S hack. A fix was sent to all cars within days.
Tesla Model S infotainment system also serves as the command center to the vehicle.
Last week, Marc Rogers, of content delivery network CloudFlare, and Lookout Mobile Security co-founder Kevin Mahaffey completed a digital break-in of a Tesla. But here’s the good news behind the Tesla Model S hack. Tesla quickly released an over-the-air firmware update, to every Model S ever manufactured, that would resolve the security holes uncovered by Rogers and Mahaffey.
The Tesla Hack
Rogers and Mahaffey had to dismantle the dashboard to gain access to an ethernet port. From there, they were able to connect directly to the CAN bus, the controller area network across which car data is sent and received.
After that, they chained together four separate vulnerabilities, first to gain access to the infotainment systems and then the touchscreen used to control vehicle functions. That let them make the speedometer disappear, alter the suspension, unlock the doors and the trunk, and make the windows go up and down. They were also able to shut down the car’s electric motor below 5 mph.
Above that speed, the dashboard screens would go blank but the car would shift into neutral, giving the driver time to find a safe place to bring the car to a stop. “Ironically, that means it’s the only car that can protect itself against a successful cyber attack,” Rogers noted.
Tesla’s Response
“Tesla has taken a number of different measures to address the effects of all six vulnerabilities reported by Lookout. And, we continue to develop further ways to harden our systems, informed by ongoing discussions with the security research community, as well as our own internal analysis. The update has been made available to all Model S customers through an OTA update. We will deploy this update to all vehicles by Thursday,” a spokesperson said in a statement e-mailed to Forbes.
Other auto manufacturers are following in Tesla’s footsteps by making internet updates available for their upcoming line of vehicles, but are starting years behind Tesla.
Rogers and Mahaffey say they also found two potential browser vulnerabilities that they exposed but did not exploit. Those flaws, resident in the WebKit browser engine, could possibly have enabled remote attacks, but Tesla’s new firmware update has resolved those issues as well.
Tesla CTO Toasts Hackers
While Rogers and Mahaffey were explaining their hacks at Def Con 23 last Friday, Tesla CTO J. B. Straubel made a surprise appearance to offer them a toast and personally thank them for their work. J.B. presented the duo with “Challenge Coins,” which will Tesla will be giving to any researcher who finds a serious security hole in their vehicles.
Proud to earn challenge coins, which are given to @TeslaMotors‘s best bounty hunters. pic.twitter.com/1YfRrsOypw
— Lookout (@Lookout) August 7, 2015
As cars acquire more digital capability, the opportunities for outside interference either by "white hat" hackers or those bent on doing actual harm will increase. Tesla, though, has the most robust program for identifying and resolving digital security issues of any manufacturer. That commitment should give every Tesla owner and prospective owner a full measure of confidence in the integrity of Tesla automobiles, now and in the future.
Tesla just gave what is perhaps its biggest signal yet that the launch of the Cybercab, its autonomous ride-hailing-geared car, is imminent.
The Cybercab has been spotted outside of Gigafactory Texas in massive numbers over the past few days, with hundreds of units being stored on property just days after the vehicle received a Certificate of Conformity from the EPA.
Today, things were a bit different.
Cybercabs spotted on Giga Texas property today had an addition: a Cybercab decal on the side, reminiscent of the “Robotaxi” ones that were placed on Model Ys just as the company launched its ride-sharing platform about a year ago.
Giga Texas drone operator Joe Tegtmeyer noticed the change today:
Tesla Cybercabs are now getting “Cybercab” logos on the side of them!
Tesla did the same with Model Ys that were given “Robotaxi” logos: https://t.co/DanANtw1m7 pic.twitter.com/FqOhH0S9Ks
— TESLARATI (@Teslarati) June 19, 2026
Tesla could be signaling that the Cybercab is preparing to enter the Robotaxi fleet in the coming weeks or months with this move. It seems more symbolic than anything; Tesla is ready to throw Cybercabs in the ride-hailing platform just as it did with Model Ys last year.
The addition of the Certificate of Conformity awarded to the Cybercab is another major factor working to Tesla’s advantage. The company now has permission from the EPA to allow the vehicle to operate on public roads and enter the chain of commerce. It’s officially street legal.
Tesla Cybercab specs revealed: range, curb weight, range ratings, and more
The big question that remains is whether Tesla will be able to operate the car without a safety monitor, especially considering it plans to put the car out there without a steering wheel or pedals. With the Cybercab only having a seating capacity of two, it is hard to believe Tesla will even consider putting a Safety Monitor in the car.
It did recently self-certify as Level 4 and has the ability to operate driverless vehicles in the State of Texas under a law that took effect on May 28. You can read more about that here:
Tesla’s Robotaxi dreams just took a massive step toward reality
We’d imagine Cybercabs will be on the roads as soon as July, but August will likely be a better estimate of when the car will be entered into the Cybercab fleet. It all depends at where Tesla is, as they’ve truly prioritized safety with the rollout of the Robotaxi platform.
Elon Musk has publicly questioned Moody’s credit assessments following the rating agency’s decision to assign SpaceX a Baa1 investment-grade rating, two notches above Tesla’s Baa3. The comments came amid discussions comparing the two companies’ financial profiles.
SpaceX earned its first-time Baa1 rating with a stable outlook from Moody’s. The agency highlighted the company’s leadership in orbital launches, the growing recurring revenue from its Starlink satellite network, strong vertical integration, U.S. government contracts, and emerging opportunities in AI infrastructure.
These factors were cited as supporting robust cash flows, margin expansion, and financial flexibility.
Musk responded directly: “Tesla’s credit rating is ridiculously low tbh,” and added, “Yeah, makes no sense. Tesla has over $40B in cash, no debt, and is consistently profitable!” His remarks underscored Tesla’s balance sheet strength and profitability at a time when many traditional automakers continue to report losses in the shift to electric vehicles.
Yeah, makes no sense.
Tesla has over $40B in cash, no debt and is consistently profitable!
— Elon Musk (@elonmusk) June 19, 2026
Tesla maintains a leading position in the global EV market, with diversification into energy and storage, battery technology, and robotics through projects like Optimus. Recent financial updates show the company generated positive free cash flow of $1.4 billion in Q1 2026, supported by operating cash flow of $3.9 billion. Cash and short-term investments stood at approximately $44.7 billion.
Moody’s has affirmed Tesla’s Baa3 issuer rating with a stable outlook in periodic reviews, acknowledging the company’s EV leadership, technology strengths, including AI for autonomous vehicles, solid profitability, and strong liquidity.
Tesla (TSLA) scores Baa3 Moody’s rating for ‘stable’ outlook
However, the agency has also noted challenges in the automotive segment and expectations for margin pressures.
Musk’s critique highlights a common debate about how traditional rating methodologies apply to high-growth, capital-intensive technology companies. SpaceX benefits from long-term government-backed contracts and diversified, recurring revenue streams, while Tesla’s valuation reflects heavy investment in future technologies such as autonomy and robotics.
Both ratings remain investment-grade, yet the one-notch difference has fueled online discussion about potential inconsistencies in evaluating innovative firms.
The exchange comes as SpaceX explores financing options following its recent valuation milestones, while Tesla continues executing on its multi-year roadmap. Musk’s pointed response serves as a reminder that credit ratings, though influential for borrowing costs, represent one lens through which markets assess corporate strength—and that company leaders often view their financial positions through the lens of long-term innovation and cash generation rather than short-term risk metrics alone.
A new report from Reuters claims that a transport authority in Sweden is pushing back against the approval of Tesla’s Full Self-Driving suite because it will travel over speed limits.
The report says the Swedish Transport Administration (TRV) recommends the European Union votes against FSD’s approval. TRV believes it should not be approved until Tesla disables FSD’s ability to speed.
TRV sent a letter to the European Union’s Technical Committee on Motor Vehicles (TCMV), which is set to meet on June 30 to discuss the potential approval of the Tesla FSD suite in the country. Tesla, which has received various approvals in Europe over the past two months, has not provided a comment.
Teslas operating on FSD do travel over the speed limit, depending on the Speed Profile that is chosen. Drivers have the ability to disengage FSD at any point; Tesla specifically states that those supervising the suite are responsible for its actions.
Let’s cut to the chase: humans operating any vehicle speed almost daily in the United States. Realistically, speed limits in the U.S. are more frequently treated as speed minimums. However, other countries are different, and driving behaviors are less aggressive.
TRV believes that “allowing automated systems to systematically exceed legal speed limits…risks undermining both the legal framework and the expected safety benefits of vehicle automation,” the report stated. It’s surprising that Tesla has not received this claim from other countries previously.
This could be a good argument to bring Max Speed back, the setting that previously allowed the driver to choose the absolute fastest the car would travel.
This would still put the responsibility of supervision in the hands of the driver. It would allow the driver to choose whether the car would travel over the speed limit or not, acknowledging that they set the speed, and if they get pulled over, there would be no ability to argue it.
However, it does not seem as if this is something Tesla will do, especially considering many U.S. drivers have requested the feature in an effort to eliminate speeding or at least tone it down. The company has not shown any interest in bringing it back.
Tesla has approvals for FSD in Europe in Estonia, Lithuania, Denmark, the Netherlands, and Belgium.
Tesla Cybercab launch is imminent after latest sighting at Giga Texas
Elon Musk says this part of Tesla ‘makes no sense’
