BlackBerry has “reluctantly” admitted that its QNX operating system (OS) was vulnerable to hacking, and allegedly kept the flaw a secret “for months”.
That’s according to a report from Politico, which cited two people familiar with the matter, one of them being a US government employee.
The sources, who were aware of discussions between BlackBerry and US federal cyber security officials, told the publication that the tech giant not only tried to deny the impact of the flaw on its products but also “resisted making a public announcement” about the matter.
The vulnerability, known as BadAlloc, impacts pre-2012 versions of BlackBerry’s flagship QNX software, which are still widely used by an estimated 200 million Volkswagen, BMW, and Ford cars, as well as hospital and factory equipment.
The flaw, which affected multiple different companies including Texas Instruments, NXP, and Google Cloud, was first discovered in late April by Microsoft Security Response Center. At the time, researchers said that they had “not seen any indications of these vulnerabilities being…