- Read More
Threat ReportsMarch 19, 2025From SDVs and AI-driven enhancements to cybersecurity threats and risks, we uncover the significant trends and developments shaping the security landscape of modern vehicles. - Read More
Threat ReportsFebruary 11, 2025This report provides an overview of key automotive cybersecurity trends in 2024, focusing on supply chain attacks, ransomware, and emerging EV threats — and emphasizing the critical need for strong defenses. - Read More
Threat ReportsJanuary 8, 2025Software-defined vehicles (SDVs) are reshaping mobility, but innovation brings risks. Our 2024 cybersecurity analysis and review of the past decade reveal key challenges and industry responses to safeguard safety and trust. - Read More
Threat ReportsDecember 5, 2023In our comprehensive report, we take stock of the various trends and incidents that have arisen this year to paint a broad picture of the dynamic automotive cyberthreat landscape. - Read More
Threat ReportsNovember 15, 2023From the hidden world of automotive data to the current and emergent trends in the cyberthreat landscape, we examine the road the industry is on to chart a secure course ahead. - Read More
Threat ReportsNovember 29, 2022From ransomware attacks to supply-chain risks, attacks and threats in 2022 indicate a swiftly evolving threat landscape for the connected car. We reexamine the prominent incidents and trends this year to glean just how the industry can gear up for the years ahead.
Reports
Research Papers
- Read More
Research PapersAugust 20, 2025The mobility landscape is on the verge of a fundamental shift. Emerging trends, such as shared mobility, autonomous driving, and vehicle connectivity, are poised to offer new transport options, enhance road safety, and improve the overall driving experience. - Read More
Research PapersAugust 7, 2025As electric vehicle (EV) adoption accelerates, EV charging infrastructure has become deeply integrated with national and local power grids. EV chargers, e-Mobility Service Providers, their cloud ecosystems, along with connected vehicles, are attracting DIY enthusiasts and curious cybercriminals. - Read More
Research PapersMarch 12, 2024Implementing zero trust cybersecurity in the automotive industry brings numerous benefits that significantly enhance the overall security posture and resilience of the ecosystem. By adopting zero trust principles, automotive industry stakeholders can establish a robust security foundation that mitigates cyber risks and ensures the protection of critical assets. - Read More
Research PapersNovember 15, 2023As data rises as a major consideration for automotive cybersecurity, we address knowledge gaps on the expanding world of vehicle data and highlight security trends that have emerged this year. - Read More
Research PapersJuly 29, 2022For this research paper, we calculated the severity levels of the attack vectors listed in UN Regulation No. 155, using the industry standard DREAD threat model.
Use Cases
- Read More
Use CasesMarch 10, 2025xZETA accelerates attack path analysis, reducing investigation time from hours to seconds, enabling PSIRTs to focus on critical incident response. By mapping vulnerabilities to real-world threats and automating key assessments, xZETA streamlines cybersecurity workflows for OEMs and suppliers.
Partner Stories
- Read More
Partner StoriesSeptember 10, 2024UD Trucks has partnered with VicOne to enhance cybersecurity in its software-defined vehicles (SDVs) and ensure compliance with UN Regulation No. 155 (UN R155), addressing the growing risks in smart logistics. - Read More
Partner StoriesMarch 11, 2024Primax’s use of source code scanning tools during the software development phase posed a dilemma: Should it prioritize product schedule or security compliance? To help tackle its challenges, Primax ultimately chose VicOne’s xZETA automotive vulnerability and SBOM management system. - Read More
Partner StoriesMarch 11, 2024Primax’s use of source code scanning tools during the software development phase posed a dilemma: Should it prioritize product schedule or security compliance? To help tackle its challenges, Primax ultimately chose VicOne’s xZETA automotive vulnerability and SBOM management system. - Read More
Partner StoriesFebruary 25, 2024Askey, a global provider of network communications and electronics manufacturing, has implemented the VicOne xZETA vulnerability scanning and SBOM management tool in the development process of its connected vehicle devices that combine on-board unit (OBU), roadside unit (RSU), and cloud-based advanced technologies for smart transportation. - Read More
Partner StoriesDecember 21, 2023In line with the global push for net-zero emissions, countries are actively working to reduce vehicular particulate emissions. Both traditional automotive manufacturers (OEMs) and emerging electric vehicle (EV) makers, are accelerating their transition to support net-zero goals. - Read More
Partner StoriesSeptember 19, 2023Askey, a global provider of network communications and electronics manufacturing, has implemented the VicOne xZETA vulnerability scanning and SBOM management tool in the development process of its connected vehicle devices that combine on-board unit (OBU), roadside unit (RSU), and cloud-based advanced technologies for smart transportation.
Solution Briefs
- Read More
Solution BriefsMay 8, 2025Many automotive cybersecurity teams are overwhelmed by disconnected intel feeds, unclear priorities, and growing compliance expectations. VicOne’s xAurient platform delivers focused, contextualized automotive threat intelligence that transforms noise into actionable insight — built to scale, automate, and align with standards and regulations. - Read More
Solution BriefsOctober 15, 2024The expanding EV charging ecosystem faces rising cyber risks and complex regulatory challenges. VicOne and Deloitte address these issues with a risk-based security service that provides continuous vulnerability detection, compliance guidance, and proactive protection. - Read More
Solution BriefsAugust 21, 2024Rising cybersecurity threats and the high costs of managing connected systems are major concerns in the automotive industry. VicOne’s xCarbon tackles these challenges by offering an efficient, flexible solution that enhances security while minimizing operational overhead. By intelligently detecting and responding to potential threats, xCarbon ensures that vehicles remain secure without compromising on performance or cost-effectiveness. - Read More
Solution BriefsJune 27, 2024The cyberattack surface has expanded rapidly with the trend toward software-defined vehicles (SDVs) and increasing reliance on the cloud and APIs. It has been challenging to attain security visibility across the broadening automotive ecosystem, but VicOne and 42Crunch’s integrated solution promises to eliminate unknown security blind spots. - Read More
Solution BriefsJune 11, 2024The automotive industry faces many challenges, from complying with new regulations to dealing with vulnerabilities and preparing for threats on the horizon. How can the automotive supply chain equip itself to handle these challenges? - Read More
Solution BriefsMay 31, 2024Calculating risk scores to identify relevant risks is no easy task because of cognitive bias, information silos, and non-actionable insights. Integrated adaptive vehicle risk management addresses these issues to prioritize risks accurately, accelerate time for risk assessment, and enable early protection.
White Papers
- Read More
White PapersOctober 2, 2025This research paper examines how ISO 15118 reshapes the cyberthreat landscape of EV charging infrastructure. We explore the risks it mitigates, shifts, and creates, and highlight how even well-intentioned standards and policies can create a false sense of security. In some cases, measures designed to strengthen protections can inadvertently leave threats unaddressed or even introduce new vulnerabilities. - Read More
White PapersJuly 7, 2025This research paper provides an organized summary of key discussions on software-defined vehicles (SDVs), which have garnered increasing attention in recent years from the perspective of cybersecurity. It offers practical insights and proposals to address specific risks associated with APIs, container technologies, OTA updates, and AI models, as well as possible countermeasures. - Read More
White PapersFebruary 6, 2025AI smart cockpits rely on AI to enhance safety and personalization, but they also expose vehicles to new attack vectors. This white paper provides an in-depth look at the evolving cybersecurity landscape and the defenses needed to protect AI-driven systems. - Read More
White PapersJuly 30, 2024To effectively mitigate API security risks in the expansive automotive ecosystem, it is essential to implement a systematic approach. Since every component represents a potential attack surface, comprehensive strategies are necessary.
Analyst Reports
- Read More
Analyst ReportsOctober 25, 2023Identified as best in class in the Japan automotive cybersecurity industry. - Read More
Analyst ReportsMarch 28, 2023Omdia Research Report Cites VicOne’s Solutions Portfolio as Proactive Approach to Boosting VSOC Capabilities
Our News and Views
Gain Insights Into Automotive Cybersecurity
- Read More
BlogJanuary 26, 2026Pwn2Own Automotive 2026 set a new record with 76 unique zero-day vulnerabilities discovered, exposing the rapidly expanding attack surface across SDVs, IVI systems, and EV charging infrastructure. The final day crowned Fuzzware.io as Master of Pwn 2026, with 28 Master of Pwn points. - Read More
BlogJanuary 23, 2026Day 2 delivered 29 new zero-days, pushing the total to a record 66. Researchers repeatedly compromised Level 2/3 EV chargers and IVI systems using practical flaws like exposed interfaces and command injection. The takeaway: automotive and charging infrastructure attacks are now repeatable at scale—shifting cyber risk from theoretical to immediate operational impact. - Read More
BlogJanuary 22, 2026Pwn2Own Automotive 2026 Day 1 opened with record-breaking momentum, with researchers successfully compromising infotainment systems, EV chargers, and Tesla interfaces—highlighting how expansive today’s automotive attack surface has become. The surge in entries and chained exploits confirms a clear shift: in the SDV era, automotive cyber risk is no longer isolated to the vehicle, but systemic across the entire ecosystem.
