Suffolk displayed the ADASTRA autonomous shuttle prototype as part of a trial to integrate self-driving shuttle services into its future mobility network, with the council working alongside Smart City Consultancy and Ohmio UK on a 325,000 pound feasibility study. The New Zealand-developed vehicle has no steering wheel or driver's seat, carries up to 14 passengers and reaches 40 mph, though trial runs were restricted to eight seated passengers at 15 mph. The trial tests technical, operational and regulatory aspects of autonomous shuttles in the UK.
NHTSA proposed optional cyan marker lamps for vehicles equipped with automated driving systems, specifying color, placement and activation requirements to visually signal that a vehicle is operating without a human driver. The proposal aims to help police and other drivers identify self-driving cars as automated vehicles proliferate on US roads.
Waymo expanded driverless service by nearly 250 square miles across five US metro areas, adding Torrance, La Jolla and a Berryessa BART link. On 5 November Waymo told riders severe weather pauses may last hours or even days. The disclosure sets explicit winter availability limits on a service increasingly written into corporate travel policies.
Hyundai and Kia reached a nationwide settlement with 35 states, led by Minnesota Attorney General Keith Ellison, requiring free repairs to millions of vehicles that lacked engine immobilizers and were left vulnerable to theft. The remedy could cost the automakers over 500 million dollars, and all future US-sold vehicles must include immobilizers, with up to 4.5 million dollars in restitution for theft-damaged vehicles. The settlement addresses a well-documented design weakness exploited in viral theft challenges targeting keyless ignition models. Affected owners must obtain the free software and hardware remedy through dealers.
NHTSA granted Tesla a five-week extension to respond to information requests in its federal probe of Full Self-Driving and Autopilot, after the original December deadline carried daily penalties for non-compliance. Tesla reported 8,313 potential traffic violation complaints but can process only about 300 per day. The extension signals escalating regulatory scrutiny of Tesla's driver assist systems in the US.
Tesla launched paid Cybercab robotaxi service in Austin in September and told regulators the vehicles meet federal safety rules, while NHTSA opened an audit into the certification and the car's lack of manual controls. Elon Musk said Gigafactory Texas will shift from Cybertruck to Cybercab production next year. The audit tests whether a purpose-built vehicle without manual controls can clear US federal safety compliance.
Uber, Pony.ai and Croatian startup Verne announced plans to launch Europe's first commercial robotaxi service in Zagreb, with Uber providing the ride-hailing platform, Pony.ai supplying autonomous driving technology and Verne handling operations and regulatory approval. The fleet will use BAIC's ARCFOX Alpha T5 electric SUV equipped with Pony.ai's seventh-generation system. No launch date is set, but initial deployment is underway, signaling Europe's first commercial robotaxi push.
A February 2022 hack of Kojima Industries, a small supplier of cup holders, USB sockets and interior parts, forced Toyota to halt 14 factories at an estimated cost of about 375 million dollars. The incident illustrates how a low-tier supplier with weak security can disrupt an entire OEM production network. Kojima took months to restore operations to near-normal levels, and the case sits within a broader wave of ransomware attacks on Japanese manufacturers. The event supports supply-chain security requirements and tiered assurance obligations for smaller automotive suppliers.
Affected Vehicle Make & Model
Toyota
Observed MITRE ATT&CK techniques
T1195 Supply Chain CompromiseT1486 Data Encrypted for Impact
NHTSA opened investigations into Waymo (Alphabet) and Zoox (Amazon) after their autonomous vehicles behaved unpredictably and reportedly violated traffic safety rules in exceptional situations. Both companies are required to report all crashes and incidents occurring during public-road testing. The probes signal heightened federal scrutiny of robotaxi safety performance and incident reporting compliance in the US.
Waymo received approval from the Ontario government to join a provincial pilot program and will begin testing robotaxis in Toronto this year with safety drivers, targeting first passengers in 2028. The company is partnering with Toronto-based Element Fleet Management and starting with high-definition street mapping. The expansion marks Waymo's entry into the Canadian market and tests its technology in winter weather conditions.
CERT-In identified four high-severity vulnerabilities in Tata Motors iRA 2.0 and iRA.ev connected car apps, which could allow attackers to access sensitive user information and vehicle-linked digital services without authorization. The flaws affect the telematics application layer linking smartphones to Tata passenger vehicles. Tata Motors stated the issues were addressed through software updates and additional security measures. Owners of affected vehicles should ensure their apps are updated to the patched versions.
Tesla has rebranded its European driver assistance system as Tesla Assisted Driving and cut the speed tolerance margin over posted limits from 50 percent to 10 percent. On a 100 km/h motorway the system previously allowed up to 150 km/h but will now stay far closer to the legal limit. The change tightens regulatory compliance for Tesla's assisted driving features across Europe.
Two Tesla crashes on California's Interstate 80 in Solano County on 13 and 22 October 2026 left one pedestrian dead and two police officers seriously injured, with both drivers reporting use of Tesla's Full Self-Driving system. The incidents intensify scrutiny of driver attention and advanced driver-assistance technology on major Northern California corridors.
Uber and Wayve launched supervised autonomous rides in London, the first autonomous trips available in the United Kingdom. Riders requesting UberX, Uber Electric or Uber Comfort may be matched with an all-electric Ford Mustang Mach-E running the Wayve AI Driver at no extra cost. The launch makes London a new European AV deployment market and pairs Uber's demand network with Wayve's end-to-end driving AI.
Baidu's Apollo unit unveiled Apollo World, an agent-driven multimodal world model for physical AI, at its AI Day event in Shenzhen on November 3. The model is built around causality and interactivity to train self-driving systems as robotaxi operations expand in Shenzhen and Beijing. The launch signals a shift by Chinese AV developers toward world models for more effective simulation-based training.
Stellantis and Pony.ai launched Europe's first autonomous robotaxi trials using Peugeot e-Traveller electric vans fitted with the AV-Ready Platform and Pony.ai technology, targeting Level 4 hands-free, eyes-off autonomy. Stellantis contributes industrial scale in light commercial vehicles while Pony.ai brings 55 million kilometers of autonomous driving experience. The testing phase aims to build the regulatory and community confidence needed for European deployment.
Saudi Arabia's General Authority for Transport approved implementing regulations for self-driving passenger transport, effective 60 days after the November 6, 2026 decision. The rules aim to organize driverless passenger services, encourage sector investment, and address safety and environmental requirements under the National Transport and Logistics Strategy, opening a regulated path for AV deployment.
Toyota and Waymo will begin testing autonomous taxis in Japan in 2027, targeting the country's first fully driverless ride-hailing service using domestically manufactured vehicles. Toyota will build Level 4 autonomous bZ4X vehicles at its Takaoka plant in Aichi Prefecture with Waymo technology integrated during production. The partners also plan expansion to the United Kingdom and other markets.
A first-hand account describes riding Pony.ai robotaxis in Shenzhen and Baidu Apollo Go vehicles in Beijing, noting initial unease gave way to comfort without a human driver. The rides illustrate how robotaxi services in major Chinese cities are moving into routine urban transportation and shaping consumer expectations for driverless mobility.
Amazon's Zoox received NHTSA approval to offer its steering-wheel-free, carriage-style robotaxi service to the public in Las Vegas, the first US approval for human-free rides. The exemption from federal safety rules covers Zoox's unconventional design with inward-facing seats. The approval sets a precedent for certifying purpose-built autonomous vehicles that fall outside traditional automotive safety standards.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Autohaus Arnold targeted by payload
Autohaus Arnold is targeted by payload.Victim Description: Autohaus Arnold (vw-arnold.de) is a German automotive dealership and service provider based in Bavaria, primarily serving the Höchstadt an der Aisch region. The company operates as an authorized Volkswagen Group partner, offering sales of both new and pre-owned vehicles from brands like Volkswagen, Volkswagen Commercial Vehicles, and Audi.Victim’s Country: DEDiscovered: 07 Nov 2026, 21:15 SGT
India's Ministry of Road Transport and Highways has published draft rules mandating cybersecurity (AIS-189) and software update management (AIS-190) for specified vehicle categories, aligning with EU, Japanese and South Korean standards. Implementation will be phased by risk exposure, prioritizing vehicles with higher automation levels and over-the-air update capability. The rules would impose formal cybersecurity and update governance obligations on OEMs selling into the Indian market. The draft is open for comment, and final timelines and enforcement details are still pending.
May Mobility launched autonomous shuttle testing on public streets in Columbus, Ohio in December as part of the Smart Columbus and DriveOhio initiatives. The Michigan-based company supplied the vehicles for what officials describe as Ohio's first self-driving shuttle pilot. The deployment expands real-world shuttle operations into a new midwestern market and supports Columbus' smart city ambitions.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Wooshin Systems targeted by metaencryptor
Wooshin Systems is targeted by metaencryptor.Victim Description: Based on our technology and know-how accumulated since our founding in 1984, Wooshin System has become a leader for the future of automotive industry through continuous R&D, under the goal of making the life of the human more productive and valuable.
Data size: —Victim’s Country: KRDiscovered: 07 Nov 2026, 19:41 SGT
The Metaencryptor ransomware group listed Hyundai E&C, part of Hyundai Motor Group, as a new victim on its leak site. The claim, reported via ransomware.live and not independently verified, targets a construction and engineering subsidiary within the automotive group's value chain rather than vehicle systems directly. If confirmed, the incident could expose corporate data and supply chain partners connected to Hyundai's broader operations. The listing signals ongoing ransomware activity against automotive-affiliated enterprises and warrants monitoring for data leak and downstream supplier impact.