'The attacks we found only scratch the surface of what is possible'

Researchers find a standardized SIM command is exposed on nine of 26 tested devices and used it to achieve code execution on a commercial EV charger The exposure is concentrated in machine-to-machine hardware rather than phones, affecting…