Waymo continues sourcing Zeekr-manufactured robotaxi vehicles from China for its US fleet, despite federal tariffs and trade restrictions that block American consumers from purchasing Chinese EVs directly. The arrangement underscores a policy gap where AV operators can import Chinese-built vehicles for commercial deployment even as consumer access is restricted. This dynamic raises questions about supply chain dependencies in the US robotaxi sector and potential future regulatory scrutiny.
Volkswagen's ID. Buzz electric van, configured as a robotaxi, is beginning operations on Los Angeles streets. The deployment marks a notable expansion of autonomous vehicle testing in one of the most complex urban driving environments in the US. It also signals Volkswagen's push to compete directly with established robotaxi operators like Waymo in major American markets.
Waymo filed a recall with NHTSA for nearly 4,000 robotaxis due to software issues in recognizing freeway construction zones, leading to vehicles driving into closed areas. The recall was addressed via an over-the-air software update without interrupting service, highlighting the evolving nature of recalls for autonomous fleets. The incident underscores challenges in autonomous vehicle mapping and regulatory frameworks.
Tata Electronics suffered a data breach where the World Leaks ransomware group leaked 630.4 GB of data, including Apple and Tesla design files, employee passport scans, and cryptographic keys. The company confirmed the incident on June 22, 2026, stating operations were unaffected. The breach highlights supply chain risks for automotive and tech OEMs, potentially leading to stricter cybersecurity requirements.
Affected Vehicle Make & Model
Jaguar Land Rover
Tesla
Observed MITRE ATT&CK techniques
T1005 Data from Local SystemT1114 Email CollectionT1552 Unsecured Credentials
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Siam Oil Product targeted by Panzer
Siam Oil Product is targeted by Panzer.Victim Description: Siam Oil Product Co., Ltd. is a Thailand-based petroleum and industrial-products distributor, operating for 20+ years with registered capital of THB 200 million and 700+ employees; it supplies fuel oil, diesel, asphalt, base oils, automotive/industrial lubricants, petrochemicals such as HDPE/LDPE/LLDPE, plastic additives, and industrial products, and also operates a coffee-shop franchise business. Its headquarters is at RS Tower, Ratchadaphisek Road, Din Daeng, Bangkok, Thailand.Victim’s Country: THDiscovered: 09 Aug 2026, 08:52 SGT
Singapore is studying the introduction of distinct licence plates for electric vehicles (EVs) to help first responders and the public identify fire risks. The proposal, discussed by Law Minister Edwin Tong, aims to address the different fire management needs of EVs compared to internal combustion engine vehicles. The Land Transport Authority and Singapore Civil Defence Force will engage stakeholders on the design and implementation. The move follows an increase in EV fires from one in 2024 to four in 2025.
Zoox received a federal exemption from NHTSA allowing it to deploy up to 2,500 driverless robotaxis commercially for two years, with paid rides launching August 10, 2026. The Amazon-owned company will begin operations in Las Vegas, with expansion planned for Miami and Austin. The exemption is a landmark regulatory milestone, as it permits vehicles built without traditional driver controls to operate at commercial scale in the United States.
Transport for London granted its first robotaxi licences to a supervised Uber autonomous vehicle fleet, marking a significant regulatory step for self-driving technology in the UK capital. The vehicles will carry passengers but retain a safety operator behind the wheel, reflecting a cautious supervised-autonomy approach. The approval signals London's entry into the commercial robotaxi market, joining a growing list of cities authorizing AV passenger services.
Waymo has removed its waitlist for robotaxi service in Dallas, opening rides to all residents and visitors across the city, with airport service to Dallas Love Field expected soon. The Alphabet-owned company operates a fleet of all-electric Jaguar I-Pace vehicles managed by fleet partner Avis Budget Group. The full public launch in Dallas marks continued geographic scaling of Waymo's commercial driverless service across the United States.
Waymo has advanced to driverless testing in Denver, removing safety drivers and operating vehicles exclusively for company employees ahead of a planned public launch later in 2026. The transition coincides with an Insurance Institute for Highway Safety study covering 2021–2024 data showing Waymo robotaxis were involved in 68% fewer crashes than human-driven vehicles across San Francisco, Phoenix, Los Angeles, and Austin. Denver represents a key geographic expansion for Waymo as it scales fully driverless commercial operations beyond its established markets.
Waymo issued a voluntary recall of approximately 4,000 Jaguar I-Pace robotaxis in April 2025 after the vehicles failed to respond appropriately to active construction zones between January and March 2025, posing risks to workers and equipment across San Francisco, Phoenix, and Los Angeles. The recall, filed with NHTSA, was resolved entirely through an over-the-air software update with no vehicles physically removed from service, marking Waymo's largest software-driven recall to date. The incident underscores both the persistent edge-case challenges facing AV software and the industry's growing reliance on OTA remediation as a regulatory compliance mechanism.
San Francisco 49ers head coach Kyle Shanahan disclosed that his Tesla was operating on Autopilot during a crash near downtown Palo Alto approximately four weeks prior, though he accepted personal responsibility and acknowledged drivers must remain engaged. The incident adds to a growing record of high-profile Tesla Autopilot-related accidents that continue to draw regulatory and public scrutiny toward Tesla's driver-assistance system. Shanahan's acknowledgment that drivers cannot fully delegate control to the system reinforces ongoing debates about the gap between consumer perception and the actual capabilities of Level 2 automation.
Autonomous driving software company Imagry has partnered with Spanish bus manufacturer UNVI to integrate its mapless autonomous driving technology into electric buses, with the first deployment planned in Germany. Imagry's camera-only, HD-map-free approach is designed to reduce deployment costs and complexity for transit operators. The partnership marks a notable step toward commercializing autonomous electric public transit in Europe.
Singapore is enhancing its cybersecurity measures to protect critical infrastructure from AI-driven threats. The country has developed a homegrown intrusion detection tool and is extending its use across all 11 CII sectors. The Cyber Security Agency has mandated board-level accountability for cybersecurity and introduced new requirements in the Cybersecurity Code of Practice. A legally binding cloud security code is expected later in 2026.
The article discusses the rapid expansion of robotaxi services by companies like Waymo, Tesla, and Zoox, highlighting that while data suggests they are safer than human drivers, they still face issues in complex scenarios like construction zones. It notes that expansion is occurring globally, with Uber and Wayve receiving approval for supervised autonomous rides in London, and Waymo planning a commercial launch there. Experts like Phil Koopman caution that scaling outpaces the resolution of underlying problems.
India's Ministry of Road Transport and Highways has introduced draft rules mandating cybersecurity (AIS-189) and software update management (AIS-190) for connected vehicles, aligning with global standards. The phased rollout prioritizes vehicles with Level 3 automation and OTA capabilities. This move reflects a proactive approach to address growing cyber threats in the automotive sector.
This article explains the ISO 15118 Plug & Charge standard for secure automated EV charging, focusing on secure key exchange, certificate validation, and session authorization. It highlights benefits for fleet operators and discusses implementation challenges such as compatibility and certificate management. The content is educational and does not report a specific incident or vulnerability.
China's MIIT has released a mandatory national standard for autonomous driving system safety (GB 44721-2026), effective July 2027. It applies to L3 and L4 systems, setting requirements for safety, user monitoring, and minimum risk maneuvers. The standard aligns with international regulations but includes China-specific scenarios like electric bicycles.
Carziqo has expanded its A-DS series autonomous delivery vehicles into New York City, targeting last-mile urban logistics in one of the country's highest-density markets. The A-DS platform integrates autonomous driving, real-time fleet monitoring, and centralized route planning designed for urban delivery environments. The New York rollout reflects growing commercial demand for autonomous logistics solutions as e-commerce volumes pressure conventional delivery networks.
New York State has halted plans to expand robotaxi operations within its jurisdiction, citing safety and regulatory concerns. The decision reflects ongoing resistance from regulators and local governments to accelerating autonomous vehicle deployments in dense urban environments. The move is a setback for AV companies eyeing New York City as a major future market and underscores the fragmented regulatory landscape across US states.
A Waymo robotaxi in a distinctive baby blue livery, internally dubbed 'Ojai,' was spotted testing in Seattle, signaling an expansion of the company's autonomous vehicle trial operations into the Pacific Northwest. The sighting suggests Waymo is actively mapping and validating its system in Seattle ahead of a potential commercial launch. Seattle would represent a significant new market for Waymo beyond its current operational cities of San Francisco, Los Angeles, and Phoenix.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: OTEGROUP targeted by blacknevas
OTEGROUP is targeted by blacknevas.Victim Description: OTE Group, founded in 1991, is one of Oman's leading business groups and part of Saad Bahwan Holding — a family-run enterprise and one of the oldest and largest privately owned business houses in Oman, with interests in over 15 industries and 30+ companies across the Gulf region.Starting as a small, one-franchise business, OTE Group has grown into a diversified powerhouse operating in 14 industries across 4 countries — Oman, UAE, Saudi Arabia, and Algeria — with 200+ customer touchpoints, and continued expansion underway.The group's core business spans automotive (exclusive distributor for brands like Cadillac, Chevrolet, Hyundai, Isuzu, Subaru, and GWM), electronics and home appliances, and polymer color concentrates for the plastics industry, alongside historical interests in auto parts, lubricants, tires, batteries, vehicle leasing, and vocational training. The company credits its growth to collaboration, cross-cultural understanding, and talent development.Victim’s Country: OMDiscovered: 08 Aug 2026, 01:24 SGT
An underground forum post claims a threat actor possesses archived data from Lucid Motors and eShocan, but no technical evidence or public confirmation has been provided. The claim is unverified and may be exaggerated, reflecting a common pattern in cyber threat intelligence. The incident highlights the growing cybersecurity challenges for connected vehicle manufacturers.
Affected Vehicle Make & Model
Lucid Motors
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: automobile-mueller.info targeted by L Group
automobile-mueller.info is targeted by L Group.Victim Description: [AI generated] N/AVictim’s Country: DEDiscovered: 07 Aug 2026, 16:40 SGT