AI supply chain attacks are no longer theoretical. VicOne's Automotive CyberThreat Research Lab breaks down how attackers are exploiting AI development tooling, why automotive OEMs face elevated exposure, and what security teams should do now.
EV charging is an ecosystem risk, not a device problem. Each session connects charger hardware, vehicle systems, apps, and cloud platforms into one attack surface. Pwn2Own Automotive 2026 proved the risk is active: 76 zero-days disclosed, $1,047,000 awarded, and EV chargers from multiple manufacturers successfully exploited. Securing it requires coordinated controls across the full stack.
With invisible code, decentralized infrastructure, and self-propagation, GlassWorm reveals critical gaps in modern software supply chain defenses — and raises a question that automotive security teams cannot afford to ignore: how secure are the environments used to build the vehicles themselves?
Real-world incidents and underground intelligence reveal how cyber risk in robotaxis extends beyond vehicles to platforms, supply chains, and operations.
Modern vehicles face evolving cyber risks, from zero-day vulnerabilities to emerging AI backdoors. Here's what they mean for the future of mobility.
The Pwn2Own Automotive zero-day vulnerability discoveries highlight expanding attack surfaces, gaps in CVE visibility, and evolving automotive cybersecurity risks.
When telematics becomes intelligent, vulnerabilities don’t just leak data—they influence operations. Discover how AI amplifies fleet-wide risk and why SDV security must extend beyond the network layer.
In the 2026 VicOne Automotive Cybersecurity Report, we examine the critical crossroads created by the overlap of legacy platforms, software-defined systems, and AI-driven technologies — and how stakeholders can navigate the path forward.
This article examines how instrument cluster bench testing exposes trust assumptions inherent in CAN-based vehicle architectures. By observing how unauthenticated CAN messages influence cluster behavior, it highlights design considerations that directly impact system resilience, safety, and risk management as automotive connectivity increases.
Modern vehicles are now Physical AI systems, where probabilistic decisions control real-world actions and raise new safety and cyber risks. Securing them requires AI-aware threat modeling, lifecycle governance, and continuous assurance to keep systems safe.
Pwn2Own Automotive 2026 set a new record with 76 unique zero-day vulnerabilities discovered, exposing the rapidly expanding attack surface across SDVs, IVI systems, and EV charging infrastructure. The final day crowned Fuzzware.io as Master of Pwn 2026, with 28 Master of Pwn points.
Pwn2Own Automotive 2026 Day 1 opened with record-breaking momentum, with researchers successfully compromising infotainment systems, EV chargers, and Tesla interfaces—highlighting how expansive today’s automotive attack surface has become. The surge in entries and chained exploits confirms a clear shift: in the SDV era, automotive cyber risk is no longer isolated to the vehicle, but systemic across the entire ecosystem.
Pwn2Own Automotive 2026 exposes critical zero-day vulnerabilities in software-defined vehicles before they escalate into real-world business and operational risk. By ensuring zero-day vulnerabilities move from exposure to resolution, the event transforms discovery into Automotive Foresight—helping organizations stay ahead of risk before it reaches the road.