Denmark examines potential cybersecurity gap in Chinese-made electric buses, The Guardian reports - Sustainable Bus

"Authorities in Denmark have opened an investigation into a possible cybersecurity vulnerability affecting several hundred Chinese-built electric buses, The Guardian reports. The move follows findings in Norway indicating that certain Yutong vehicles could be accessed remotely through systems used for diagnostics and software updates. According to Norwegian operator Ruter, in fact, tests conducted on two buses in an isolated environment revealed that the manufacturer retained the ability to connect remotely to vehicle control systems."

"In Denmark, public transport authority Movia handles 469 Chinese-made electric buses, including 262 supplied by Yutong. Movia's chief operating officer Jeppe Gaard is quoted on The Guardian saying that "electric buses - like electric cars - can be remotely deactivated if their software systems have web access. This is not a Chinese bus problem. It is a problem for all types of vehicles and devices with Chinese electronics built in.""

"This applies not only to Yutong models but also to other modern buses, as the OTA capabilities are also introduced on the new Mercedes eIntouro for instance. Gaard noted that the Danish Agency for Civil Protection and Emergency Management has not recorded any instances of remote shutdowns. However, the agency warned that onboard systems equipped with internet connectivity, sensors, cameras, microphones, and GPS modules could represent exploitable vulnerabilities."

Authorities in Denmark have opened an investigation into a possible cybersecurity vulnerability affecting several hundred Chinese-built electric buses. Norwegian tests found certain Yutong buses could be accessed remotely through systems used for diagnostics and software updates, with the manufacturer retaining the ability to connect to vehicle control systems. Movia operates 469 Chinese-made electric buses, including 262 Yutong vehicles, and reached a 50% zero-emission fleet. Movia's chief operating officer warned that web-connected software can allow remote deactivation and that the risk reflects OTA technological changes across modern buses, not the product origin. The Danish emergency management agency has not recorded remote shutdowns but warned that internet-connected onboard systems could be exploitable; Yutong stated it strictly complies with applicable laws and industry standards.

Read at Sustainable Bus