🕸️ Ransomware Detected: Ponti targeted by thegentlemen
Ponti is targeted by thegentlemen.Victim Description: ponti.pl Ponti is a specialized automotive company based in Gdańsk, Poland, focused on the direct import, sales, and professional servicing of American vehicles. Operating as a leading expert in the US car market, the company handles everything from modern everyday models to the restoration of classic muscle cars and vintage vehicles. They provide a comprehensive range of services, including sourcing, repairing post-accident imports, and dedicated mechanical maintenance for automotive enthusiastsVictim’s Country: PLDiscovered: 07 Aug 2026, 16:07 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
A 2024 safety recall for Bendix's EC80 heavy-truck brake controller also fixed serious vulnerabilities, including a wirelessly reachable remote code execution flaw, according to NMFTA researcher Ben Gardiner at Black Hat USA 2026. The recall covered an estimated 450,000 units across three OEMs, but the security fixes were not publicly disclosed. The vulnerabilities could cause denial-of-service, loss of steering assist, and other safety-critical failures, though direct crash causation is unclear.
Observed MITRE ATT&CK techniques
T1203 Exploitation for Client ExecutionT1210 Exploitation of Remote ServicesT1499 Endpoint Denial of ServiceT1552 Unsecured Credentials
Global Automotive Cyber Incidents/Eventsinformational
ICICI Lombard has launched India's first motor cyber insurance cover, addressing cyber risks in connected vehicles. The policy covers financial losses from hacking, cyber extortion, vehicle immobilization, and software damage. This reflects the growing cybersecurity concerns in the automotive sector.
Singapore's Maritime and Port Authority (MPA) has announced that from 2030, all new harbour craft operating in the Port of Singapore must be fully electric, capable of using B100 biodiesel, or compatible with net-zero fuels such as hydrogen. This regulation is part of Singapore's broader strategy to achieve net-zero emissions from its harbour craft, pleasure craft, and tugboat sectors by 2050. The announcement follows successful trials of B100 biodiesel on existing vessels, which demonstrated stable engine performance over 200 hours of operation, indicating qualified readiness for the fuel.
Singapore's MPA and PSA are advancing autonomous shipping for port operations, with a call for design proposals to address safety and regulatory challenges. The country is also targeting fully electric or net-zero fuel harbor craft by 2030, and introducing cybersecurity and maritime training programs to support the digital transition.
The article provides an update on the autonomous vehicle regulatory landscape in the U.S., covering federal, state, and local developments. It highlights NHTSA's efforts to update guidance and establish a consortium for AV performance standards, while noting the lack of a comprehensive federal framework. State-level actions include California's updated permitting and a Teamsters lawsuit, and Washington D.C.'s proposed AV legislation. The piece underscores ongoing debates over safety standards, labor impacts, and state preemption.
GM is developing a Level 3 eyes-off system for Cadillac, with testing underway and a 2028 launch planned. The system uses lidar, radar, and cameras, and raises concerns about repair costs and legal liability. NHTSA is still developing regulations for such systems, and state laws vary.
Uber plans to launch robotaxi service in San Francisco this year, using electric Lucid SUVs equipped with autonomous driving technology developed in partnership with Nuro. The service will compete with existing players like Waymo and Zoox. Uber aims to become the leading commercialization platform for autonomous vehicles, with a goal of operating in 28 cities globally by 2028. The company has not yet released specific details on its Bay Area strategy or exact launch timeline.
The University of North Dakota has joined the U.S. Department of Energy's Genesis Mission to develop a framework for improving the security and reliability of AI models used in battery management systems. The project, led by Jielun Zhang, focuses on adversarial robustness to protect against cyberattacks that could compromise battery health monitoring in electric vehicles and other energy applications. The research aims to create standardized testing methods and model-hardening techniques to enhance the resilience of AI in critical energy infrastructure.
The University of Wisconsin-Madison announced that Professor Ye is part of a Department of Energy-funded project under the Genesis Mission to develop an adversarial robustness framework for AI models in battery management. The project aims to protect AI models from cyber threats like corrupted data and backdoors, which could affect battery health assessments in electric vehicles and grid storage. The research focuses on federated learning and cybersecurity to enable secure, privacy-preserving collaboration across organizations.
Tesla has acknowledged a defect in the power conversion system (PCS) of pre-2026 Cybertrucks and is extending the warranty to 8 years or 150,000 miles. The company will reimburse owners who paid for repairs and has issued a software update to allow Supercharging even when the PCS fails. This follows reports of widespread PCS failures, with a poll showing 41% of Cybertrucks affected. Tesla's response includes covering Supercharging for affected owners until parts are available.
European regulators have withheld safety performance data related to Tesla's Full Self-Driving system following pressure from Tesla, according to Reuters. The decision limits public and regulatory transparency around FSD's real-world safety record in European markets. The move raises serious concerns about regulatory independence and the ability of oversight bodies to hold AV technology developers accountable.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: David King Architect targeted by Orova
David King Architect is targeted by Orova.Victim Description: We are an Architectural Firm and Design and prepare plans for almost any low rise structure. We have designed Assisted Living Facilities, Offices, Warehouses, manufacturiing facilities and Car dealerships.Victim’s Country: USDiscovered: 06 Aug 2026, 17:21 SGT
NHTSA designated the 2026 Tesla Model Y as the first vehicle to pass its new eight-part ADAS safety benchmark, integrated into the long-running New Car Assessment Program with formal pass/fail evaluations. The designation applies to Model Y units assembled on or after November 12, 2025, establishing a new federal safety standard that other automakers with ADAS-equipped vehicles will now be measured against.
South Korea's largest logistics operator, CJ Logistics, announced it will deploy 11.5-tonne autonomous freight trucks on four inter-terminal urban corridors in Daegu starting October 2026, marking the first time self-driving trucks at that weight class will navigate signalized intersections and mixed pedestrian traffic in a Korean city. Routes range from 4.2 to 26 kilometers, representing a global first for commercial autonomous freight operations in dense urban environments rather than controlled highway settings.
Aurora's autonomous Peterbilt 579 semi trucks, operated commercially by carrier Value Truck, have begun driverless runs on Interstate 35 between Dallas and Laredo — passing through Austin and San Antonio — as well as a Fort Worth-to-Phoenix route. The trucks operate with no safety driver in the cab, marking a significant expansion of Aurora's commercial driverless freight network across major Texas and Southwest corridors. Austin is emerging as a central hub for AV deployment, with multiple companies now running both robotaxis and autonomous freight trucks on public roads.
A Tesla driver in Parker, Colorado was pulled over for traveling 64 mph in a 45 mph zone and claimed the vehicle's Full Self-Driving system was responsible, arguing they were not driving. Parker Police Department issued a clear statement that driver assistance technology does not transfer legal responsibility from the human operator. The incident underscores ongoing public confusion about the capabilities and legal liability framework surrounding Level 2 ADAS systems marketed under names like Full Self-Driving.
Some Tesla owners report that a recent Full Self-Driving software update is causing onboard computers to overheat, potentially affecting system performance and reliability. The issue has been flagged across multiple vehicle configurations, raising questions about the software's optimization and hardware compatibility. Thermal management failures in FSD systems present a safety and quality concern at a time when Tesla is under heightened regulatory scrutiny over its autonomous driving claims.
Affected Vehicle Make & Model
Tesla
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Long-Lewis Automotive Group targeted by Dark Project
Long-Lewis Automotive Group is targeted by Dark Project.Victim Description: About Long-Lewis Automotive Group The Long-Lewis Auto Group is Alabama’s largest automotive retailer, with origins tracing back to a hardware store founded in Bessemer, Alabama, in 1887. It became one of the nation's very first Ford dealerships in 1915 and operates multiple dealerships across the state. Following a successful cyberattack on Long Lewis, more than 500 GB of confidential information was stolen. More than 15,000 records containing personal data of the organization’s customers and employees, important financial and banking documents, and other valuable company information were compromised. Currently, Long Lewis lost control of more than 650,000 files.Victim’s Country: USDiscovered: 06 Aug 2026, 00:21 SGT
Amazon-owned Zoox is transitioning from free rides to fare-charging for its robotaxi service in Las Vegas, marking a critical step toward commercial viability for the purpose-built, bidirectional autonomous vehicle. Zoox's Las Vegas operation is among the first deployments of its unique vehicle design, which lacks a traditional front or back. Beginning to charge fares signals growing operational confidence and a shift toward revenue generation after years of development.
Amazon's Zoox will launch its first commercial paid robotaxi service in Las Vegas on August 10, marking a major milestone for the company after years of development. The purpose-built, bidirectional robotaxi operates without a steering wheel or pedals and will serve public passengers for the first time. This makes Zoox a direct competitor to Waymo in the commercial robotaxi market, intensifying the race for autonomous ride-hail dominance in the US.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Al-Futtaim Group targeted by everest
Al-Futtaim Group is targeted by everest.Victim Description: [AI generated] Al-Futtaim Group is a diversified conglomerate headquartered in Dubai, United Arab Emirates. Founded in the 1930s, it operates across retail, automotive, real estate, and financial services sectors. The group represents major global brands including IKEA, Toyota, and Marks & Spencer across the Middle East, Africa, and Asia. It is one of the region's most prominent privately held business enterprises.Victim’s Country: AEDiscovered: 05 Aug 2026, 21:08 SGT
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Keysight targeted by everest
Keysight is targeted by everest.Victim Description: [AI generated] Keysight Technologies is an American electronic test and measurement company headquartered in Santa Rosa, California. It designs and manufactures instruments, software, and services used to design, emulate, and test electronic equipment. Its solutions support industries including aerospace, defense, communications, semiconductors, and automotive. Formerly part of Agilent Technologies, Keysight became an independent public company in 2014.Victim’s Country: USDiscovered: 05 Aug 2026, 21:05 SGT
Cyfirma's Q2 2026 Automotive Industry Threat Report assigned the sector an elevated cyber risk score of 5.0 out of 10, based on 90 days of telemetry across five threat categories. Ransomware activity recorded 47 victims across 20 countries, holding steady at 2.08 percent of total global ransomware victims, with Tier 1 automotive suppliers absorbing the highest victim count by a significant margin. The W-shaped monthly pattern, dipping in May before recovering through June and July, suggests persistent financially motivated threat actor interest rather than opportunistic spikes. Third-party supply chain exposure is identified as a key driver, underscoring the systemic risk posed by supplier ecosystem weaknesses.
UC San Diego researchers discovered critical vulnerabilities in the KARR Security System, an aftermarket car alarm installed in an estimated 2 million US vehicles. Any attacker within Bluetooth range can silently unlock the vehicle, disable the alarm, honk the horn, flash lights, or cut the ignition entirely without authorization. The flaws expose a broad population of vehicle owners to theft, stalking, and stranding attacks with no physical access required. No patch status is mentioned, leaving the scale of exposure and remediation timeline unclear.