A report issued by the group said millions of Kia’s connected vehicles were at risk of remote control by bad actors.