Fiat Chrysler recalls 1.4m cars for software upgrade after researchers highlight security vulnerability

The "voluntary safety recall" follows a report by Wired magazine which highlighted the work of two security researchers who claim that hackers could obtain remote control of certain Fiat Chrysler vehicles because of a previously unknown security vulnerability. The security researchers demonstrated how features of a Jeep Cherokee, including the brakes, windscreen wipers, radio and transmission could be wirelessly manipulated as a result of the vulnerability, according to the report. 

In its recall statement, Fiat Chrysler said that the security of its customers is "a top priority" for the company and that it has "established a dedicated system quality engineering team focused on identifying and implementing best practices for software development and integration".

In a separate development, Fiat Chrysler has admitted that it breached car safety laws in the US in relation to previous car recalls. It has agreed to a $105 million penalty after signing a consent order with the National Highway Traffic Safety Administration (NHTSA). The consent order (37-page / 1.46MB PDF) said the company had failed to "adequately remedy defective vehicles within a reasonable time through repair, replacement, or repurchase". The company also admitted to failing to provide the NHTSA with information relating to its vehicle defects and recalls as it was required to do so.

The penalty includes an immediate $70m fine, and also accounts for $20m of performance improvements that Fiat Chrysler has committed to making in relation to its handling and reporting of safety risks and recall campaigns. The company will also give owners of some vehicles affected by defects the chance to sell them back to the company, and an independent monitor is to be appointed to "assess, track and report the company’s recall performance" over the next three years, the NHTSA said.