‘Source of data': are electric cars vulnerable to cyber spies and hackers?

Mobile phones and desktop computers are longstanding targets for cyber spies – but how vulnerable are electric cars?
On Monday the i newspaper claimed that British defence firms working for the UK government have warned staff against connecting or pairing their phones with Chinese-made electric cars, due to fears that Beijing could extract sensitive data from the devices.
Here we look at whether there are problems with electric cars and security.
Security experts spoken to by the Guardian say electric cars – the most advanced road vehicles on the market – could be exploited by hackers.
Rafe Pilling, the director of threat intelligence at the cybersecurity firm Secureworks, says electric cars have myriad ways of generating data that is of interest to hostile states, given the microphones, cameras and wifi connectivity they contain.
'There are lots of opportunities to collect data and therefore lots of opportunities to compromise a vehicle like that,' he says.
He adds that wifi or cellular connectivity, which allows a manufacturer to update a car's operating software – known as an 'over the air' capability – could allow data to be exfiltrated.
'A modern vehicle that has over the air update capabilities – which is crawling with computers, various radios, Lidar sensors and external cameras – could well be repurposed as a surveillance platform,' he says.
A mobile phone connected to the car, whether via a charging cable or Bluetooth, is another source of data, he says.
Experts say car owners in sensitive industries or in political and government positions should exercise discretion.
'If you are an engineer who is working on a sixth-generation fighter jet and you have a work phone that you are connecting to your personal vehicle, you need to be aware that by connecting these devices you could be allowing access to data on your mobile,' says Joseph Jarnecki​​​​, a research fellow at the Royal United Services Institute thinktank.
Nate Drier, a tech lead at the cybersecurity firm Sophos, says concerned drivers or passengers can click the 'don't trust' option when they connect their phone charger with the car – but they then lose out on all the benefits that ensue, from using music streaming apps to messaging.
'I would assume most people are allowing that connection to happen so they can have all the benefits of the features on that phone,' he says.
Pilling adds that hire car users should take note as well.
'In general, it's a bad idea to sync your phone or device with a vehicle that isn't yours, as you can leave copies of contacts and other sensitive data in the car entertainment and navigation system and most people forget to wipe this after they leave a hire car,' he says.
China is a major manufacturer of electric vehicles (EVs) through brands including BYD and XPeng. This, allied with the Chinese state's use of cyber-espionage, makes those cars a source of potential concern. China's National Intelligence Law of 2017, for instance, states that all organisations and citizens shall 'support, assist and cooperate' with national intelligence efforts.
'Chinese law obliges Chinese companies to cooperate with state security, so one has to assume that if a car is capable of spying on you it may be misused to do so,' says Prof Alan Woodward, a computer security expert at the University of Surrey. There is 'no evidence' in the public domain to point to use of Chinese vehicles in such a way, he adds.
However, experts also wonder if China would risk causing serious damage to a key export sector such as EVs by making it a vector for intelligence gathering. Mobile phones, smart watches and other wearable devices are more likely targets for espionage.
A government spokesperson would not comment on specific security measures, but said: 'Protecting national security is our top priority and we have strict procedures in place to ensure that government sites and information are appropriately protected.'
A more detailed statement was made last month by the defence minister Lord Coaker, who said the Ministry of Defence (MoD) was 'working with other government departments to understand and mitigate any potential threats to national security from vehicles'. He said the work related to all types of vehicle and 'not just those manufactured in China'.
Referring to an i report that the MoD had banned EVs with Chinese components from sensitive sites and military training bases, he said there were 'no centrally mandated policy restrictions on the movement of Chinese manufactured vehicles'.
However, he said individual defence organisations – a reference to public and private entities – may have stricter EV requirements on certain sites.
BYD has been contacted for comment. XPeng said it was 'committed to continuously adhering to and complying with the applicable UK and EU privacy laws and regulations'.
The SMMT, the trade body for UK carmakers and traders, told the i: 'All manufacturers with cars on sale in the UK must adhere to relevant regulations on data privacy, and EVs are no different.
'The industry is committed to upholding a high level of customer data protection, including proportionate use of data, including apps and paired mobile phones, which can be removed from cars according to individual manufacturer instructions, giving peace of mind to motorists.'
READ SOURCE

Try Our AI Features

Explore what Daily8 AI can do for you:

Learn with AIFact CheckingText to SpeechAI Summary

Related Articles

New York Post

6 hours ago

• New York Post

News Corp extends CEO Robert Thomson's contract through 2030

News Corp will extend the contract of chief executive Robert Thomson through 2030, the media giant said Sunday. Thomson was appointed CEO of News Corp — whose properties include The Post, Dow Jones, the Wall Street Journal and book publisher HarperCollins — in 2013. His contract was extended in 2023 until 2027. He has delivered News Corp's four most profitable years from fiscal 2021 to 2024, with continued strong performance in fiscal 2025 despite a challenging media landscape, the company said. 3 News Corp CEO Robert Thomson had his contract extended through 2030. Bloomberg via Getty Images 'Robert has been instrumental in News Corp's growth and transformation, and his vision and leadership are extremely important as the company continues to navigate this era of rapid change,' News Corp Chair Lachlan Murdoch said in a statement. Thomson has been at the helm of the New York-based company through several major deals, such as the sale of its Australian cable-TV unit Foxtel to British-owned sports network DAZN for $2.19 billion in 2024. 3 New York-based News Corp is the parent company of The Post. Robert Miller 3 News Corp's properties include The Post, Dow Jones, the Wall Street Journal and book publisher HarperCollins. Bloomberg via Getty Images News Corp also signed landmark agreements with major technology platforms, including most recently with OpenAI, to license the company's intellectual property in exchange for meaningful compensation. 'Rupert and Lachlan Murdoch have adroitly sculpted a company that is passionate and principled and purposeful, and it is a profound privilege to serve as Chief Executive,' Thomson said in a statement. 'For journalists, for authors, for society, for those who strive and aspire, these are times of immense challenge and boundless opportunity. Our leadership team is acutely conscious of an unwavering responsibility to our shareholders, and we are grateful for the sterling efforts of all our colleagues as we pursue profitability and seek to realize our vast potential.'

Hypebeast

9 hours ago

• Hypebeast

Hercules' DJControl Mix Ultra is a Mobile DJ Controller for ... Mobiles

In 2025, there isn't much you can't be or do if you wanted to (thanks, technology) – and if becoming aDJ's been on your list, it's never been easier. Enter the Hercules DJControl Mix Ultra: a truly compact mobileDJ controllerthat's made for, well, mobiles. Designed to work seamlessly with smartphones and small tablets, it's the latest addition to Hercules' lineup – and it delivers a ton of features at an accessible price. Weighing in at just 1.9-pounds and measuring 12.4-inches by 6.9-inches, the Mix Ultra is a super portable and lightweight DJ controller that slips easily into most standard backpacks. It's powered by a 1,000 mAh rechargeable battery that can deliver up to 10 hours of use on a single charge, and can recharge to full in one hour. The2025 CES Innovation Award-winning device connects to your phone over Bluetooth LE – the 'low energy' version of Bluetooth that maintains connectivity without using too much power – allowing users to enjoy a cable-free session for longer. It uses your phone as its audio source, letting you load up tracks you have saved on your device or play from popular streaming platforms, and comes with a splitter cable in the box that lets you connect both headphones and speakers to it – splitting the audio channels this way allows you to hear what you're mixing (in your headphones) separately to the master output (from the speakers), although its worth noting that it achieves this by creating two mono tracks. For beginners and hobbyists, at who the Mix Ultra is aimed at, this shouldn't be a big issue, and it's safe to say Hercules isn't trying to target more experienced DJs – or audio purists – with its latest product. The Mix Ultra features eight effects pads that allows users to hot cue, creates loops, play audio 'FX' among other things. One of these pads, 'Neural Mix', lets you isolate a track's stems (its individual elements, like the vocals or bassline) to use these in your own mixes, opening up a world of creativity when it comes to DJ'ing. Another pad provides pitch control, and there's even a sampler pad that allows you to add your own samples, but also comes ready with a few included for you to use. The controller has a tri-band EQ for the low, mid and high frequencies – the same kind of EQ you'd find on most basic DJ mixers – with rubber knobs that turn smoothly. And, for transport, it includes an easily removable protective travel cover that doubles-up as a phone holder once removed: you simply place the Mix Ultra on top of it, like a tray, and a handy slot for your phone takes form toward the rear. It's compatible with both iOS and Android devices and there is a companion app, 'djay', for both platforms – it's free and you can download it on theApple App StoreandGoogle Play Store. While the Hercules DJControl Mix Ultra is a far cry from the industry standard ($3,000 to 4,000 USD) controllers you'll find in clubs worldwide, it's also a fraction of the price. It packs several features that make it ideal for those just starting to explore the hobby, and fun enough for more experienced DJs who just want to play around with some beats. The Hercules DJControl Mix Ultra is available nowvia Herculespriced at £149.99 GBP / $‌219.99 USD.

USA Today

14 hours ago

• USA Today

Best of Olympic track star Georgia Hunter Bell in images

Georgia Hunter Bell was born in France but is now considered an English track and field star. She runs "middle distance" events such as the 800 and 1500 meters. She is already the national indoor champion at 1500, having won the event in 2024 and '25. She captured a bronze medal in the 2024 Olympics in Paris, which was sweet given she was born in that great city. Additionally, Hunter Bell takes part in duathlons, events with a running leg, cycling leg, then a final running leg. When not running, Hunter Bell works for a London firm that studies cyber attacks. 'We use machine learning and AI to plug into organizations and see how they are getting hacked basically," she told the Guardian in 2024. "A lot of times companies come to us after they have a cyber attack, they get funding and need to get something in order to protect themselves. We work with companies all over the world. It's a booming business." Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell Georgia Hunter Bell