NHTSA opened investigations into Waymo (Alphabet) and Zoox (Amazon) after their autonomous vehicles behaved unpredictably and reportedly violated traffic safety rules in exceptional situations. Both companies are required to report all crashes and incidents occurring during public-road testing. The probes signal heightened federal scrutiny of robotaxi safety performance and incident reporting compliance in the US.
CERT-In identified four high-severity vulnerabilities in Tata Motors iRA 2.0 and iRA.ev connected car apps, which could allow attackers to access sensitive user information and vehicle-linked digital services without authorization. The flaws affect the telematics application layer linking smartphones to Tata passenger vehicles. Tata Motors stated the issues were addressed through software updates and additional security measures. Owners of affected vehicles should ensure their apps are updated to the patched versions.
Researchers at Chalmers and the University of Gothenburg analyzed 413 vulnerabilities in automotive-related software and concluded that risks from apps and cloud services connected to vehicles have tripled compared with the previous decade. The affected systems include mobile apps and cloud backends that expose owner data such as home address, GPS traces, and driving history. Many flaws were trivial, including unchanged passwords, echoing the 2015 Jeep Cherokee media system takeover that led Fiat Chrysler to recall 1.4 million vehicles. The findings point to a need for stronger authentication and secure cloud design across connected car services.
South Korean police referred 80 Tesla owners to prosecutors for illegally activating Full Self-Driving on China-built Model 3 and Model Y vehicles that lack local certification. Officers also seized 21 unauthorized devices used to bypass Tesla's regional software restrictions. The case signals tightening enforcement of AV software certification and import rules in South Korea.