WIRED just put out a KARR Security video on July 20, 2026. According to them about 2 million vehicles on the road today have it installed. A vehicle is vulnerable even if the KARR device was de-activated.
Acrisure [KAAR] says its July 20 firmware update addresses the Bluetooth flaw. Dealers often leave the hardware connected after a vehicle is sold, even when the buyer declines to pay for the alarm service. If you bought a used car recently it may have a KARR device you don't know about.
Because KARR is third-party equipment, automakers can't distribute the fix through their usual software update systems. The unusual arrangement places the problem outside the normal vehicle security process.
1 Button Press Can Hack Millions of Cars https://youtu.be/FwA3CuJxbk4I just completed the update. Tucson Subaru installs KARR Security on all the new cars they sell. I already had the app installed on my phone so updating was easy. My KARR device is still active and I make sure it is on every night.
The KARR device's Bluetooth turns off after 10 minutes so start your car and explore the app for a while.
TURN OFF the car and poke around the app until you find the Firmware Update screen. Click on Update.
The update and verification takes a couple of minutes.
That's it.
The KARR device is not just connected to an ignition cutoff, it is connected to every system in your car and cannot be easily removed.
Here are the instructions for activated and non-activated systems:https://karrsecurity.com/karr-security-firmware-update-instructions