Connected car apps and cloud services pose growing security risks

A study by researchers from the University of Gothenburg and Chalmers University of Technology reveals that the primary cybersecurity threats to modern vehicles are increasingly located outside the cars themselves. By examining 413 automotive software vulnerabilities reported between 2022 and 2024, researchers found that weaknesses involving connected apps, websites, and cloud services have nearly tripled compared to the previous decade.

As vehicles become more integrated with smartphones, charging stations, and online services, the attack surface expands. These external connections can expose sensitive data, such as driving routes and home addresses. The study notes that in 2024, information related to approximately 800,000 vehicles from various Volkswagen Group brands was left accessible online.

Beyond data privacy, the research highlights the danger of poorly separated systems. If entertainment and information systems are not adequately isolated from driving controls, a digital compromise could potentially affect critical vehicle functions like steering or braking, similar to a well-known 2015 demonstration involving a Jeep Cherokee.