🕸️ Ransomware Detected: Hyundai E&C targeted by metaencryptor
Hyundai E&C is targeted by metaencryptor.Victim Description: Hyundai Motor Group is a global corporation that has created a value chain based on automobiles, steel, and construction and includes logistics, finance, IT and service. With about 250,000 employees worldwide, the Group’s automobile brands include Hyundai Motor Co. and Kia Corporation. Armed with creative thinking, cooperative communication and the will to take on all challenges, we are working to create a better future for all.
Data size: —Victim’s Country: KRDiscovered: 07 Nov 2026, 19:39 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Pekin Insurance targeted by metaencryptor
Pekin Insurance is targeted by metaencryptor.Victim Description: Pekin Insurance operates as a group of combined entities—primarily The Farmers Automobile Insurance Association, Pekin Insurance Company, Pekin Select Insurance Company, and Pekin Life Insurance Company (OTC: PKIN)
Data size: —
Revenue: USD 270MVictim’s Country: USDiscovered: 07 Nov 2026, 19:39 SGT
Researchers found vulnerabilities in a major automaker's connected car platform enabling remote unlocking and control of vehicles in Australia and other regions. Exploiting exposed admin tools, identity credentials, and a firewall path traversal bypass let them mint app tokens and send remote commands, underscoring cybersecurity risk in connected vehicle fleets.
Senators Richard Blumenthal and Edward Markey sent letters to 18 automakers demanding updates on how they protect vehicle owners from cyberattacks and privacy invasions tied to in-car electronic systems. The inquiry follows high-profile incidents in which researchers hacked vehicle entertainment systems, in some cases gaining control of the car. It renews Markey's 2013 investigation into automotive cybersecurity vulnerabilities and pressures manufacturers on infotainment and connected-system security. The letters seek disclosure of protective measures, signaling continued legislative scrutiny of automaker security practices.
Researchers at Chalmers and the University of Gothenburg analyzed 413 vulnerabilities in automotive-related software and concluded that risks from apps and cloud services connected to vehicles have tripled compared with the previous decade. The affected systems include mobile apps and cloud backends that expose owner data such as home address, GPS traces, and driving history. Many flaws were trivial, including unchanged passwords, echoing the 2015 Jeep Cherokee media system takeover that led Fiat Chrysler to recall 1.4 million vehicles. The findings point to a need for stronger authentication and secure cloud design across connected car services.
Uber hired Charlie Miller and Chris Valasek, the security researchers who remotely hacked a Jeep Cherokee, to defend its self-driving cars against cyber attacks. The pair joined Uber's Advanced Technologies Center alongside autonomous vehicle experts recruited from Carnegie Mellon University. The hires reflect growing industry focus on vehicle cybersecurity as AV fleets expand.
BYD unveiled an 8.5-metre Level 4 autonomous electric bus, the B90, with partner MOGOX at Singapore Urban Mobility Week, and launched a C12 DUO coach in Birmingham. BYD supplies the platform while MOGOX provides the self-driving system, signaling Chinese OEMs expanding autonomous transit exports amid rising receivables and European political scrutiny.
About two dozen Tesla Cybercab test vehicles were spotted on public roads across Metro Detroit, including I-696, M-10 and Telegraph Road, in early November 2026. The camera-only robotaxis reportedly carried steering wheels, contradicting the production design. Testing in Michigan's winter conditions raises questions about camera-only perception performance when lane markings are obscured by snow and road salt.
Fourteen Members of the European Parliament have formally asked the European Commission to assess whether BYD vehicles pose a security threat to the EU and to consider restrictions including exclusion from public procurement. The written question, led by French MEP Francois Kalfon and submitted on 4 November, requests that ENISA evaluate the security risks of BYD vehicles and consider placing the carmaker on a high-risk supplier list. The move signals growing regulatory scrutiny of connected vehicles from third countries and their potential links to sensitive European infrastructure. No assessment outcome or binding action has been announced, leaving procurement and market-access implications unresolved.
A Chinese-affiliated startup conducted a test run of a driverless bus in Tokyo, according to The Yomiuri Shimbun. The trial places Chinese autonomous shuttle technology on Japanese public roads. It reflects growing cross-border deployment of autonomous bus platforms in Japan's transport market.
Global Automotive Cyber Incidents/Eventsinformational
Fiat Chrysler launched a bug bounty program operated by Bugcrowd, paying researchers up to 1,500 dollars for reporting security flaws in its vehicles and connected devices. The program followed an FBI warning that carmakers' products were increasingly vulnerable to hacking, and payouts scale with the severity of the identified flaw. The move formalizes vulnerability disclosure for FCA's connected vehicle fleet and gives researchers a sanctioned reporting channel. The program reflects a broader shift toward crowdsourced security testing across the automotive industry.
Chinese automakers are standardizing roof or in-cabin lidar, multi-sensor suites and high-compute ADAS stacks in production models ahead of GB 44721-2026, a mandatory national safety standard for L3 and L4 systems effective July 1, 2027. The regulation requires specific human-machine interaction, takeover monitoring and minimum risk strategies. The deadline forces design and certification changes across China's high-level ADAS vehicle pipeline.
Italy's Ministry of Infrastructure and Transport (MIT) confirmed that the new Codice della Strada does not halt autonomous driving, introducing specific rules for automated driving with an initial onboard controller requirement and progressive openness to remote control. The code immediately liberalizes partial automation. The clarification matters because Italy is defining a regulatory path for AV testing and commercialization amid parliamentary debate.
Jaguar Land Rover has begun a controlled, phased restoration of digital systems disrupted by a cyber attack, with sections of its digital estate back online and operations resuming in a managed manner. The incident affected JLR's manufacturing and retail-facing systems, and the recovery announcement lifted parent Tata Motors shares by over 2 percent after a two-day decline. The event underscores the operational and financial exposure automakers face from attacks on production and dealer networks. Recovery work remains ongoing, with suppliers and retail partners notified as systems return.
Tesla displayed a mass-production Cybercab robotaxi with no steering wheel or pedals at the China International Import Expo in Shanghai, its first exhibition in Asia. Tesla's robotaxi fleet began operations in Austin on September 3, scaling past 300 vehicles within 30 days and accumulating roughly 5 million kilometers by October 18 with no safety monitors and zero airbag deployments. The expo debut signals Tesla's push toward China market entry.
The 02 series of amendments to UN Regulation 171, governing supervised driver-assistance systems like Tesla Assisted Driving, takes effect 24 December 2026 per UK Department for Transport calculations. The update adds provisions for system-initiated manoeuvres outside motorways and hands-off phases plus speed-limit assistance, areas where Dutch approval of Tesla's system required exemptions. No authority has confirmed whether Tesla's software meets the new text.
Tesla answered NHTSA's Special Order under oath regarding how the Cybercab can operate without a steering wheel, pedals or mirrors, then requested the entire file be kept confidential, leaving only one sentence and a firefighter guide in the public docket. Commercial paid Cybercab rides continue in Austin while the certification case for the control-less vehicle stays sealed.
Chinese automaker XPENG received authorization to conduct Level 4 autonomous robotaxi demonstration operations across Guangzhou, moving its project from technical validation to real-world operation. The approval lets XPENG evaluate an actual robotaxi service rather than just vehicle capability, and the company frames it as a step toward future international expansion of its autonomous driving technology.
Waymo's published Las Vegas service map now includes downtown, extending north of the original Strip corridor that ran to Sahara Avenue at the September launch. The Help Center does not state new square mileage or a date for full rider access. The expansion follows October additions of Harry Reid International Airport trips for eligible riders.
Ansan City in South Korea implemented an ordinance allowing autonomous vehicles to use designated public parking spaces free of charge within its pilot operation zone, effective September 30. The ordinance also enables financial support for AV transport operators and a city-run reservation and payment platform. The move supports Ansan's status as a Ministry of Land, Infrastructure and Transport-designated autonomous driving pilot zone.
Kodiak AI signed its first binding commercial contract to deliver 75 autonomous trucks to California freight carrier DTL Transport starting in 2028. The deal precedes Kodiak's planned December launch of fully driverless highway operations hauling Ikea merchandise on Interstate 45 between Dallas and Houston. The agreement signals growing carrier commitment to driverless Class 8 trucking on public highways.
South Korean police referred 80 Tesla owners to prosecutors for illegally activating Full Self-Driving on China-built Model 3 and Model Y vehicles that lack local certification. Officers also seized 21 unauthorized devices used to bypass Tesla's regional software restrictions. The case signals tightening enforcement of AV software certification and import rules in South Korea.
Singapore regulators are reviewing autonomous driving standards after an incident involving a Grab robotaxi. The review follows scrutiny of Grab's AV operations in the city-state. The case tests how quickly Singapore, one of Asia's most permissive AV testbeds, tightens oversight of commercial autonomous ride services.
UK firm Aurrigo began trials of its Auto-Shuttle in Cambridge, claiming the country's first testing of a custom-built autonomous passenger vehicle on a main road among other traffic. Three 10-seat shuttles run between Madingley Road Park and Ride and the University of Cambridge West Campus under an Innovate UK and CCAV-backed project with the Greater Cambridge Partnership.
WeRide operates more than 1,800 robotaxis, with its five-seat GXR van carrying fare-paying riders with no safety driver in Abu Dhabi and Dubai via Uber bookings. However, WeRide has disclosed no public revenue-per-ride figure or verifiable crash rate, leaving the commercial viability of its Gulf driverless operations unproven.