Drawing on over 15 years of experience in the digital information field, we have watched technology migrate from desktop computers to smartphones, and now, into the vehicles we drive every day. Modern Electric Vehicles (EVs) are no longer simply modes of transportation; they are sophisticated software platforms on wheels, permanently connected to the internet and packed with cameras, microphones, and sensors.

While this connectivity offers incredible convenience and efficiency, it has also introduced unprecedented vulnerabilities that are largely unregulated. Recent cybersecurity investigations into popular connected vehicles have revealed alarming blind spots that put driver privacy and national security at risk.

The “Zero-Password” Vulnerability

A recent deep-dive investigation into modern EVs, specifically targeting popular models like the plug-in hybrid BYD Shark, demonstrated how easily these digital fortresses can be breached. Cybersecurity experts analyzing the vehicle’s internal network—known as the CAN bus—discovered that critical access points lacked even basic password protection.

By exploiting these weak points, researchers were able to hack into the vehicle’s network to replicate what could be done via remote access. The results were chilling: a bad actor could track the vehicle’s real-time GPS location, monitor the exact angle of the steering wheel, and remotely trigger internal functions like windshield wipers and headlights. Even more concerning, hackers could utilize the vehicle’s Bluetooth connection to eavesdrop on driver phone calls and extract sensitive information, such as banking passwords, by interacting with the driver’s synced smartphone.

The Over-The-Air (OTA) Blind Spot

Beyond direct hacking, the architecture of modern EVs allows manufacturers to push closed-source, Over-The-Air (OTA) software updates. In theory, this allows carmakers to fix bugs and improve performance overnight. In practice, it means the vehicle sitting in your driveway on Monday could operate entirely differently by Tuesday, without your explicit consent.

Security researchers point out that these updates can alter fundamental vehicle functions, from battery management to suspension and steering. Because the coding is secret and closed-source, local regulators and vehicle owners have no visibility into what data is being collected or how the software is changing the car’s behavior.

Geopolitical Pushback and Sensitive Sites

The global market dominance of Chinese-manufactured EVs has elevated this cybersecurity issue to a matter of national intelligence. Companies operating under Chinese jurisdiction are subject to national security laws that oblige them to assist intelligence agencies if requested. This has raised red flags for Western governments, as technicians have demonstrated the ability to remotely view a car’s speed, steering angle, and live passenger status in real-time.

As a result, military and intelligence facilities in countries like the United Kingdom and Australia have begun placing strict parking restrictions on connected EVs. The presence of these vehicles around sensitive sites creates what security experts call a “mesh of video and electronic knowledge”—a granular, real-time surveillance capability. Highlighting this risk, some modern EVs utilize 360-degree camera systems manufactured by companies that have already been banned from federal government buildings due to surveillance concerns.

As the automotive landscape rapidly transforms, vehicle regulation has struggled to keep pace with the digital age. Until minimum cybersecurity standards are legally mandated for connected cars, the responsibility falls on drivers and organizations to understand the digital footprint they leave behind every time they get behind the wheel.

The convergence of automotive engineering and artificial intelligence is fundamentally changing our world. To master the basics of how AI systems operate and build practical digital skills for the future, join our 3-hour learning program for beginners, Start Your AI Life.

For program outlines, registration details, and more tech insights, visit us at Pariganaka.com or contact our team at 070 6006 404.