Norway's Ruter found real bus cyber risk, but not a Chinese one

Norwegian transit operator Ruter tested a Chinese Yutong electric bus in an isolated mine: cameras were isolated from the maker's systems, but an internet path to operationally important vehicle systems was found. The control was a less-connected 2022 European VDL, so the test could not isolate nationality as the cause.

• Yutong exterior cameras were isolated from the maker's online systems; no Lutvann surveillance link found
• An internet-connected path through manufacturer systems reached operationally important vehicle parts
• The control was a 2022 VDL with little external connectivity and no OTA, making comparison uneven
• Denmark's Movia, using EY assessment, found no basis to call Chinese buses less cybersecure