A vulnerability in XCharge EV charging stations, tracked as CVE-2026-9039, exposes a misconfigured SSH service on the charging connector when a vehicle is plugged in, with the SSH server defaulting to root/root credentials. Discovered by security firm Sailflow, the flaw affects XCharge charging infrastructure and allows unauthenticated attackers to gain root-level access to the device. Potential consequences include free recharging fraud, physical hardware damage, and lateral movement into the charging provider's backend network. No patch status is confirmed in the disclosure, and the default credential exposure represents an immediate, exploitable risk across deployed XCharge units.
CaoCao, a Chinese ride-hailing platform owned by Geely, has begun driverless robotaxi testing without onboard safety operators on public roads in Hangzhou, China. The move marks a significant step toward fully unattended autonomous commercial operations in one of China's major cities. CaoCao joins Baidu Apollo and other Chinese AV players in pursuing permit-backed driverless testing as China accelerates its regulatory framework for autonomous mobility.
A ComfortDelGro autonomous vehicle collided with a road divider during a routine mapping test in Punggol, Singapore on January 17, 2026, with no passengers or injuries reported. The vehicle detected a small object and the onboard safety operator took manual control, but the collision occurred during that handover. The incident underscores the safety risks associated with human-to-autonomous control transitions, a critical challenge for AV operators ahead of broader commercial deployment.
Tesla Robotaxi and Waymo are both operating in Tampa, Florida, with a firsthand account confirming active deployments as of late July 2026. Tesla's service faced high demand constraints on at least one occasion, limiting ride availability. The simultaneous presence of two competing robotaxi platforms in Tampa signals accelerating commercial expansion beyond initial launch markets like San Francisco and Austin.
Motional, backed by Hyundai Motor Group, is targeting a driverless commercial robotaxi launch on the Uber platform in Las Vegas by end of 2026, using a redesigned AI-first autonomous driving architecture built around Large Driving Models. Hesai has been named the exclusive lidar supplier for Motional's Ioniq 5 robotaxi fleet. The LDM-centered approach is intended to improve scalability and lower deployment costs as the company moves toward fully driverless commercial operations.
France has publicly rejected the provisional EU approval of Tesla's Full Self-Driving Supervised system, with Transport Minister Philippe Tabarot citing unacceptable remaining safety risks. The Netherlands' RDW authority had granted the original approval in April 2026 under a special European exemption procedure for emerging technologies. France's opposition is the first formal pushback from a major EU member state and complicates Tesla's strategy to achieve broad European market access for FSD.
Hong Kong's Transport Department approved the expansion of an autonomous vehicle trial on Airport Island in North Lantau to fully driverless operation, removing the requirement for backup drivers on board. The approval followed a review of test reports and multiple site inspections, with Commissioner Winnie Tse confirming the vehicles met safety, stability, and operational standards. The clearance marks a significant regulatory milestone for AV deployment in Hong Kong, advancing the territory toward commercial driverless operations.
Daegu City, South Korea, launched three simultaneous future mobility demonstration projects covering autonomous freight logistics, passenger unmanned shuttles, and AI drone-based public safety services. The logistics project — described as South Korea's first industrial-complex-based autonomous freight demonstration — will run a 25-ton autonomous truck connecting a Coupang logistics center to the Dongdaegu hub through June 2027. The multi-domain rollout positions Daegu as a leading testbed for integrated autonomous mobility across commercial and public-sector applications.
Cobb County, Georgia's Board of Commissioners is set to vote on a framework agreement to advance an autonomous shuttle pilot program in the Cumberland district, in partnership with the Cumberland Community Improvement District. The vote would formalize the governance structure needed to deploy driverless shuttles in the area. Approval would represent one of the first county-level autonomous shuttle commitments in the Atlanta metro region, signaling growing municipal interest in last-mile AV solutions.
Aurora Innovation signed Value Truck, a cross-border carrier specializing in heavy equipment and perishables, as a new commercial customer for its Aurora Driver autonomous trucking platform. Value Truck will initially deploy driverless trucks on the Dallas-Laredo and Fort Worth-Phoenix long-haul corridors using Aurora's second-generation system. The partnership expands Aurora's commercial customer base and reinforces the viability of driverless freight on high-volume Texas-to-Southwest trade lanes.
Momenta has launched driverless Robovan parcel deliveries, including overnight routes, in the Xiangcheng district of Suzhou, China, using its R7 world model. The system operates without HD maps, reducing dependency on costly and slow map-surveying infrastructure and enabling faster expansion into new districts. The deployment leverages over 12 billion km of passenger car data, positioning Momenta to compete on per-delivery cost reduction at scale.
A three-person team completed the 2,886-mile Cannonball Run from New York to California in 47 hours, 15 minutes using Tesla FSD v14.3.6 software with zero disengagements or driver interventions, setting a new autonomous Cannonball Run record. The run beat the previous autonomous record, set just two months earlier using FSD v14.3.2, by 2 hours and 40 minutes. The back-to-back record improvements demonstrate rapid iterative gains in Tesla's FSD capability over long-distance, real-world driving conditions.
David Moss, a Tacoma, Washington resident who sells LiDAR equipment professionally, accumulated 20,000 consecutive miles on Tesla FSD v14.2 in a single unbroken streak using his Model 3, with no steering, braking, or system cancellation interventions. His earlier 10,000-mile milestone in December 2025 and a 2,732-mile coast-to-coast run were recognized by Tesla as an official customer story. The feat provides a notable real-world data point on FSD reliability, though it remains a supervised system requiring driver attentiveness.
Denmark's Road Traffic Authority approved Tesla's Full Self-Driving (Supervised) feature for use on Danish roads by accepting the Netherlands' RDW type approval framework, bypassing the need for a separate national review. This cross-border regulatory recognition marks a notable expansion of Tesla FSD Supervised across Europe. The move signals growing flexibility among EU member states in validating autonomous driving software through mutual recognition rather than redundant national processes.
A proposed NHTSA rule change to federal brake standards could eliminate the existing annual production cap on robotaxis that lack traditional pedal-and-steering-wheel controls, with the public comment period closing imminently. Currently, AV manufacturers are limited to deploying a capped number of exempted vehicles per year under Federal Motor Vehicle Safety Standards. Removing this cap would be a major regulatory unlock, enabling companies like Waymo and Zoox to scale commercial fleets significantly faster.
The South Korean EV charging platform Chaevi suffered a data breach resulting in the exposure of approximately 300,000 personal data records. The attack targeted the platform's backend infrastructure, which supports EV charging services and stores user account information. This incident underscores the growing vulnerability of EV charging ecosystems as targets for data theft, with customer privacy and platform integrity directly at risk. The breach raises regulatory concerns under South Korea's Personal Information Protection Act and signals that EV charging operators require stronger data security controls.
Singapore's Land Transport Authority received the first of six 16-seat self-driving public buses in March 2026, ahead of planned trials on bus services 400 in Marina Bay and 191 in one-north, scheduled for the second half of 2026. The buses are equipped with cameras and sensors and will undergo rigorous safety and operational testing before passenger deployment. A successful three-year pilot could trigger procurement of 14 additional driverless buses, potentially reshaping Singapore's public transit network.
A Waymo autonomous vehicle was involved in a two-vehicle crash near West Venice Boulevard in downtown Los Angeles early Sunday, leaving several people critically injured and requiring two ambulances. The cause of the crash had not been determined at the time of reporting. The incident adds to ongoing scrutiny of Waymo's safety record in dense urban environments as the company scales its Los Angeles operations.
Tesla reported during its Q2 2026 earnings call that its Robotaxi platform has completed over 380,000 miles of fully unsupervised ride-hailing across multiple U.S. cities with no notable safety incidents. The claim represents one of the most significant safety data disclosures Tesla has made for its autonomous platform to date. If verified, this safety record would strengthen Tesla's regulatory and public credibility as it scales its robotaxi network.
Saudi Arabia put into operation the Middle East's first hydrogen-powered autonomous heavy truck, with the core fuel cell system supplied by Shanghai-based Re-Fire Energy Group. The deployment is notable for its extreme operating environment, with surface temperatures exceeding 50°C and heavy sand exposure, testing the durability limits of hydrogen fuel cell technology. The milestone signals growing Gulf region interest in combining autonomous driving with zero-emission hydrogen powertrains for heavy freight applications.
A Tesla operating in Autopilot mode in Texas crashed into a home, killing a 76-year-old woman, with driver Michael Butler claiming the system was engaged at the time. The incident adds to a documented pattern of Autopilot-related fatalities and reinforces regulatory and legal scrutiny of Tesla's driver-assistance technology. The case intensifies debate over whether Tesla's Autopilot branding and design adequately prevent driver over-reliance on a system not rated for full autonomy.
Affected Vehicle Make & Model
Tesla
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Thermalex Inc targeted by kairos
Thermalex Inc is targeted by kairos.Victim Description: Thermalex specializes in aluminum extrusion solutions, offering high-efficiency and corrosion-resistant products since 1985. Based in Montgomery, Alabama, the company serves various industries including HVAC, automotive, battery cooling, and industrial applications. With advanced manufacturing systems and a commitment to quality, Thermalex is recognized as a global leader in the aluminum extrusion industry. Their expertise includes the fabrication of microchannel tubes and complex extrusions tailored to meet diverse client needs.Victim’s Country: USDiscovered: 25 Jul 2026, 21:54 SGT
A senior London Assembly Member is urging UK ministers to grant Transport for London (TfL) full regulatory authority over driverless taxi trials, as companies including Uber and Wayve seek approval to carry passengers in automated vehicles in London as early as 2025. Currently, the Department for Transport retains oversight, creating a governance gap that critics argue could slow deployment. The outcome will shape the regulatory framework for autonomous ride-hailing across the UK's largest city.
Uber and Waymo are ending their exclusivity arrangement in Atlanta and Austin, opening those markets to additional autonomous ride-hailing competitors. The partnership had previously given Waymo a preferred or sole position on the Uber platform in those cities. The change signals a more competitive robotaxi landscape as multiple operators vie for market access in key U.S. cities.
Aurora launched its second-generation driverless commercial trucks and expanded its autonomous fleet across the Sun Belt region of the United States. The move signals Aurora's push to scale driverless freight operations beyond initial pilot corridors, targeting high-volume trucking lanes in southern states. This expansion marks a significant step toward commercial viability for autonomous long-haul trucking.