Connected-car vulnerabilities increasingly lie outside the vehicle

Researchers at the University of Gothenburg and Chalmers analyzed 413 vulnerabilities in connected vehicles from January 2022 to September 2024. More than a third of the flaws are in external apps, websites and cloud services — nearly triple the share in earlier work — with 45% rated high severity and 16% critical.

• 413 connected-car vulnerabilities analyzed for 2022–2024
• Over a third of flaws are in external apps and cloud services
• 45% of vulnerabilities are high severity, 16% critical
• GPS data of about 800,000 Volkswagen Group cars was exposed in 2024