Automotive News. Curated from across the open web and key dark web sources. Stay informed.
Volkswagen Group China secured a Level 3 autonomous driving road test license in Hefei and began real-world testing and data collection, keeping it on track to make L3 technology ready by 2027. The company also announced six new CMP-platform models for China over 18 months. The license strengthens VW's position in China's competitive L3 development race.
Tesla launched driverless robotaxi service in Fort Worth, Texas, covering a roughly 145-square-mile area that includes Benbrook, Forest Hill, Haltom City, River Oaks, Saginaw, and White Settlement. The expansion marks Tesla's continued scaling of its robotaxi network into new Texas markets, intensifying competition with Waymo and other operators in the race to capture driverless ride-hailing share.
Researchers at the University of California San Diego found a critical flaw in dealer-installed anti-theft devices controlled through a smartphone app, exposing roughly 2 million vehicles to remote theft. The vulnerability affects aftermarket telematics hardware rather than factory systems, widening the attack surface beyond OEM control. Because the fix is complex and depends on dealer cooperation, remediation is slow and inconsistent across the fleet. Owners of affected vehicles remain at risk until the devices are patched or replaced.
Cartrack, a vehicle tracking company, suffered a ransomware attack in August that compromised a customer database containing contact details, bank account information, and vehicle data. The Dire Wolf ransomware group claimed responsibility and asserted it exfiltrated 500 gigabytes from Cartrack servers. South Africa's Information Regulator opened an investigation into the incident for compliance with the Protection of Personal Information Act. The breach exposes fleet and vehicle location data, raising risk for both Cartrack customers and downstream automotive data ecosystems.
Chinese autonomous driving technology is being tested in Switzerland through the IAMO pilot, which launched public service on September 28 using three Nissan Ariya electric cars with a safety operator aboard. The vehicles serve nearly 100 stops across four municipalities in Zurich's Furttal region, while driverless shuttle buses operate at Zurich airport, signaling Chinese AV tech expansion into European public transport.
Waymo launched a small-scale ride-hailing service in the Phoenix area on December 4, 2018, with a human safety driver behind the wheel in case of malfunction. The commercial debut of Google's self-driving spinoff marked the first attempt to monetize nearly a decade of autonomous technology development.
BMW's partially automated urban driving system passed required driving tests by an independent technical body, with final regulatory approval targeted for early 2027. The navigation-linked system handles junctions, lane changes, right-of-way rules, and roundabouts across motorway, country road, and city driving. The milestone positions BMW to challenge Tesla in urban driver-assistance features in Europe.
ISO and SAE International published an updated cybersecurity standard governing over-the-air software updates for connected vehicles, requiring integration of cryptographic root-of-trust units in vehicles. The standard targets OTA update pipelines used across global automotive manufacturing, aiming to harden the integrity and authenticity of remotely delivered firmware. The move raises the baseline for OEM compliance and supplier design, pushing manufacturers toward hardware-backed trust anchors for update authentication.
The FAA added research topics on lost communications and spectrum interference for autonomous airport vehicles in October 2026, following an earlier cybersecurity topic added in September under its Aviation Research BAA. The scope covers autonomous towing, baggage transport, de-icing, shuttles and inspections, requiring assessment of vehicle behaviour during communications outages and safe resumption once links return. The spectrum work addresses interference between autonomous vehicles and airport navigation aids, radar and debris-detection systems, with each research period capped at 12 months.
Two dozen Tesla Cybercabs are testing out of Tesla's Southfield collision repair facility in Detroit, joining Waymo driverless vehicles on major roads including I-696 and M-10. The expansion moves the robotaxi competition from Austin into Michigan's multi-season environment, with test drivers using temporary steering wheels in the two-seat vehicles.
A Tesla Cybercab in Austin, Texas was left nose-to-nose with a Waymo Jaguar I-PACE after the Waymo reportedly turned into the wrong lane, with a second Waymo robotaxi behind it. The incident, photographed by a Cybercab passenger, illustrates unresolved edge-case navigation and multi-operator interaction challenges as driverless fleets scale in shared city environments.
Since September 11, 2026, Article 14 of the EU Cyber Resilience Act (Regulation 2024/2847) obliges manufacturers of connected hardware and software sold in the EU to report actively exploited product flaws to authorities within 24 hours. This is the first obligation to take effect, with most of the regulation and its Article 64 fines applying from December 11, 2027. Automotive OEMs and suppliers shipping connected components into Europe now face a tight disclosure clock, requiring incident detection and reporting processes to be operational well ahead of the broader compliance deadline.
Eacon is operating 60 autonomous electric haul trucks at Zijin Mining's site at 5,400 meters altitude, addressing staffing shortages while cutting emissions. The deployment demonstrates autonomous haulage viability in extreme high-altitude mining conditions. It reinforces mining as a leading commercial segment for autonomous electric heavy vehicle adoption.
MAN and Munich transport operator MVG moved their autonomous bus into public trials under the MINGA project in Munich. The trial reflects European OEMs and cities sharing risk in integrating autonomous buses into public transport. It advances driverless bus deployment from closed testing toward real passenger service in European cities.
BYD and Mogox unveiled a level 4 autonomous bus, the B90, in Singapore featuring factory-fitted autonomy rather than aftermarket retrofits. The series-built approach signals driverless buses transitioning from pilot conversions to production vehicles. It positions Singapore as a testbed for scalable autonomous public transit manufacturing.
The European Commission opened public feedback on draft implementing regulation Ares(2026)10298442, which adapts General Safety Regulation (EU) 2019/2144 implementing acts so whole-vehicle type approval can cover fully automated vehicles in dual-mode and no-manual-driving configurations. Comments close December 1, 2026. The draft establishes an EU-wide approval pathway for fully automated vehicles, a prerequisite for scaling robotaxi and driverless deployments across member states.
Kodiak Robotics delivered its first Western Star 49X autonomous trucks to Atlas, moving operations onto public county roads. The deployment tests whether Kodiak's off-highway autonomy can transfer to shared traffic environments. It marks a step toward validating autonomous trucking beyond controlled sites into mixed public road use.
Gwangju will begin autonomous-driving demonstration runs at the end of November with two vehicles and safety managers in the driver's seats, scaling to 130 by year-end and 200 early next year. The South Korean city targets a paid pilot in 2028, with regulatory reforms and ongoing talks on taxi licenses and transport jobs.
Bajaj Auto suffered a ransomware attack on June 23, 2026 that disrupted operations and prompted a temporary halt in company activities. The Indian manufacturer stated it took immediate action to contain the breach and implemented precautionary measures to limit impact while an investigation proceeds. The incident adds to a growing pattern of ransomware campaigns targeting automotive manufacturers and their production IT environments. Details on affected systems and whether data was exfiltrated remain under investigation.
Sentosa will launch an on-demand autonomous vehicle service with ride-hailing platform TADA in early 2027. The Singapore resort island deployment pairs AV shuttles with an established mobility operator, signaling growing integration of driverless services into commercial ride-hailing networks in Asia.
A developer publishing as xwtk released NEMESIS, an open toolkit that achieves root on Hyundai Motor Group Gen5W infotainment systems by exploiting an unsigned update path. Gen5W units ship in many Hyundai and Kia models from roughly 2015 onward, and the toolkit enables community packages such as wireless Android Auto and Apple CarPlay. The release exposes a persistent unsigned-update weakness across millions of vehicles. No official patch has been reported, leaving owners and the manufacturer to assess mitigation.
Baidu developed Apollo World, an AI-driven simulator that generates complete virtual journeys to train its Apollo robotaxis on rare high-stakes hazards such as cyclists running red lights and animals entering traffic. The system targets edge cases difficult to reproduce in road testing. Simulation-based training at this fidelity could accelerate validation of robotaxi safety cases as Baidu competes in China's self-driving taxi market.
SILIKO d.o.o. is targeted by Aoqin.Victim Description: Siliko d.o.o. is a development supplier and manufacturer of technical products made of elastomers and thermoplastics with over 30 years of tradition. During this period, production program expanded substantially and nowadays includes activities which offer customers a comprehensive range of services from draft design and construction to tool making and mass production. 70 percent of our production is being exported to the European Union markets, predominantly to buyers from the German automotive industry. At the same time, we are an important supplier for the household appliances industry on the European market, also cooperating with partners in the electrical, sanitation and construction industries. With state-of-the-art technology, knowledge and experience, we strive to offer the best products and to go beyond our customers expectations. Status: Not paid. Data publication: 2026-11-09 14:00 UTC. Revenue: $61.6M. Employees: 130. Data type: banking, clientsData, confidential.Victim’s Country: SIDiscovered: 04 Nov 2026, 08:54 SGT
A Tesla vehicle described as autonomous crashed into a fire hydrant in South El Monte near Los Angeles. The incident adds to scrutiny of Tesla's driver-assistance and robotaxi operations, with crash details relevant to ongoing safety and regulatory review of its autonomous features.
BYD is issuing a remote security update for its Shark 6 ute after researchers at Fortify Labs demonstrated physical access to the vehicle could be used to manipulate its infotainment system, as shown on the ABC Four Corners program. The flaw affects the Shark 6 infotainment head unit and its connected services. The over-the-air remedy shows how EV makers can respond quickly, but the incident raises questions about how deeply infotainment compromises can reach into vehicle functions. Owners should confirm the update is applied.